🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #442

User authentication problem

#442
From: thezombie
Date: Fri, 19 Jan 2001 15:18
32 lines
2462 bytes
Hello,
     I'm currently having a problem with User Authentication on the
firewall (Checkpoint Firewall-1). I have successfully setup Radius for
client authentication but would like to setup User Authentication for
access to one of the servers for security reasons. I have created an
account in the user database on Firewall-1 and added a rule to use User
Authentication when accessing the server. However I cannot get the
authentication to work. When I access the server I get a prompt for
username and password for authenication. After entering it, it prompts
again until after the third time it displays the following message:-

FW-1 at <server>:  Unauthorized to access the document
Authorization is needed for FW-1
The authentication required by FW-1 for <account> is: RADIUS
Reason for faiure of last attempt:  FW-1 rule

I get a similar entry in the firewall log. The rule that stopped this
is the cleanup rule and the reason is the same. My question is it
possible to setup both Radius and user authentication together? I
gathered in the error message it is using the RADIUS server for some
reason when it not supposed to. Maybe this is due to the generic user
which is set to use RADIUS authenctication. Or is this an encryption
issue? Has anyone been able to use both Radius and user authencication
via the firewall? I would appreicate any information/tips on how to fix
this problem. Thanks.

Regards,
Tim


Sent via Deja.com
http://www.deja.com/
Technical Details
Message-ID: <949lro$gh5$1@nnrp1.deja.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sjo1.usenetserver.com!news-out.usenetserver.com!newsfeed.direct.ca!look.ca!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,240a6fdfd580d73d,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,240a6fdfd580d73d,start
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2001-01-19 07:35:40 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sjo1.usenetserver.com!news-out.usenetserver.com!newsfeed.direct.ca!look.ca!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mail
From: thezombie@my-deja.com
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: User authentication problem
Date: Fri, 19 Jan 2001 15:18:26 GMT
Organization: Deja.com
Lines: 32
Message-ID: <949lro$gh5$1@nnrp1.deja.com>
NNTP-Posting-Host: 194.202.49.210
X-Article-Creation-Date: Fri Jan 19 15:18:26 2001 GMT
X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)
X-Http-Proxy: 1.1 x52.deja.com:80 (Squid/1.1.22) for client 194.202.49.210
X-MyDeja-Info: XMYDJUIDthezombie