Re: OpenLDAP and FireWall-1

[Earl Robinson <earl@earlrobinson.com>]

yes,
I've used Checkpoint's UAM to create/modify ldap accounts. In my
experience it works without a hitch. Now I haven't done extensive
testing, but i was able to get user authentication with groups to work
just fine.

I've long since rebuilt that machine, so I can't tell you exactly how i
had it set up, but it was pretty much stock 1.2.8 openldap. Are you
getting a particular error or failure? Or is it just checkpoint not
authenticating?
-earl

Konstantinos Agouros wrote:
> 
> Hi,
> 
> has anybody tried to do userauthentication with FW-1 and CP-FW1 4.0?
> We got it to work for whole O's or OU's but groups don't seem to work.
> I am correct in the assumption that members of groupOfNames or
> groupOfUniqueNames are put in the description of the group, and that I don't
> use the memberOf-Attribute?
> 
> Regards,
> 
> Konstantin Agouros
> --
> Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood@agouros.de
> Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
> ----------------------------------------------------------------------------
> "Captain, this ship will not sustain the forming of the cosmos." B'Elana Torres