The fact that you can get the fingerprint means that the fw is communicating with the ldap server. Make sure you have the correct Login DN syntax and also make sure you picked up the right LDAP server profile.
--m
At 02:36 PM 10/17/2003 +0200, you wrote:
I'm traing to configure authentication via LDAP. NG AI and OpenLDAP 2.1.22. In case I choose "Use Encryption" via port 636 I can Fetch fingerprint from LDAP server, but I can't fetch branches.
I have proper licence, Login DN is OK, as well as password. For ldap.schema I had used converted netscape schema ($FWDIR/lib/ldap/schema.ldif) steps are in:
Document Title: How to configure OpenLDAP with FireWall-1/VPN-1 Modified Date: 13-Feb-2003 Document Revision: 1.8 Author: Udo Schneider <[EMAIL PROTECTED]>
Any hints are realy welcome!
best regards Peter Matej
--- Odch�dzaj�ca spr�va neobsahuje v�rusy. Outgoing message is virus free. Checked by AVG 6.0 Skontrolovan� antiv�rusov�m syst�mom AVG (http://www.grisoft.cz). Verzia: 6.0.528 / V�rusov� datab�za: 324 - d�tum vydania: 16. 10. 2003
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
