RE: [FW1] firewall not allow domain login

["Katz-Braunschweig, Daniel" <DKatz@iona.edu>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


Do you happen to have a rule like ANY Firewall ANY DROP?  or Firewall ANY
ANY DROP?  If so, you'll need to allow NBT from your PDC and DBC.

Daniel Katz

-----Original Message-----
From: yuen518 [mailto:yuen518@netvigator.com]
Sent: Friday, April 16, 1999 1:32 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] firewall not allow domain login



Hi everyone,

It's more like a NT problem than firewall problem. See any help.

I have installed FireWall-1 4.0 on NT Server with service patch 4. After
that, everytime I log on this server, I get prompted the following
message.

"Logon Message:
 A domain controller for your domain could not be contacted.
 You have  been logged on using cached account information.
 Changes to  your profile  since you last logged on may not be
available."

"Event View Message:
No Windows NT Domain Controller is available for domain CRL.
(This event is expected and can be ignored when booting with the "No
Net"
  Hardware  Profile.)

The following error occurred:
There are currently  no logon  servers available to service the logon
request."

Points to note
1.) I have to configure the firewall to become a member of the NT domain
for OS password authentication. I know it is not recommended, I have to
get it to log on the PDC.

2.) Before the firewall is installed, there is no such domain login
message prompted.

3.) If the firewall service is stopped, the warning message disappear.

4.) I have to try to remove the firewall from the domain list and then
add it to the domain again. The problem still exists.


Has anyone encountered this similar problem before ? Looking forward to
valuable advices.

Thanks.
Justin.




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================