[FW1] Problems with user authentication (again)

[James Edwards <jedwards@sos.state.tx.us>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


I cannot make user authentication work.  I have the following set rules

1	group1@any	host1	telnet	user auth	long
2	any		host1	telnet	reject		long	

User X is a part of group group1.  I am using the firewall 1 password
authentication method.  When I try to telnet to host1, I get the login
prompt from Firewall 1.  I type in my login and password and get the
following message:

User X authenticated by Firewall 1 authentication
Access denied by FW-1

When I check the log it shows that user X was rejected by rule 2.  

One thing to note.  When I originally set this up, I added myself as a
member of the sa group and everything seemed to work.  Then I added other
users to a different group and couldn't make them work at all while mine
still worked.  I could find no reference to the sa group anywhere in the
rules or properties.  

What am I doing wrong?

Jim Edwards
Systems Manager
Texas Secretary of State



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================