FW: [FW1] Problems with user authentication (again)

[James Edwards <jedwards@sos.state.tx.us>]

This suggestion fixed the problem.  I am on SP3 of ver 4.  I went into the
group and removed all the users and readded them and now it is working.

Thanks to everyone for your suggestions and help.

Jim Edwards

-----Original Message-----
From: Mark van Gelder [mailto:vgelder@icon.co.za] 
Sent: Tuesday, October 12, 1999 8:03 AM
To: 'James Edwards'
Subject: RE: [FW1] Problems with user authentication (again)


What version GUI are you using? The was an issue with the SP3 gui. Users
were not added to the groups correctly when added from the User definition.
Try adding the user to the group from the Group definition.

Mark


-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
James Edwards
Sent: Tuesday, October 12, 1999 2:11 PM
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Problems with user authentication (again)



I cannot make user authentication work.  I have the following set rules

1	group1@any	host1	telnet	user auth	long
2	any		host1	telnet	reject		long

User X is a part of group group1.  I am using the firewall 1 password
authentication method.  When I try to telnet to host1, I get the login
prompt from Firewall 1.  I type in my login and password and get the
following message:

User X authenticated by Firewall 1 authentication
Access denied by FW-1

When I check the log it shows that user X was rejected by rule 2.

One thing to note.  When I originally set this up, I added myself as a
member of the sa group and everything seemed to work.  Then I added other
users to a different group and couldn't make them work at all while mine
still worked.  I could find no reference to the sa group anywhere in the
rules or properties.

What am I doing wrong?

Jim Edwards
Systems Manager
Texas Secretary of State



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================