View Single Post
  #1 (permalink)  
Old 2007-02-06
WALLE WALLE is offline
Junior Member
 
Join Date: 2005-08-30
Posts: 10
Rep Power: 0
WALLE has an average reputation (10+)
Default SecureClient and RSA Radius and Generic User

Hi
We use SecureID VPN and RSA Radius authentication through SecureID for our company users.
The users are not registred in SmartDashboard but hits the "Generic" user when they authenticate. The "Generic" user is member of the "SecurID users" group (for RSA authentication) wich is member of the "OfficeMode users" group (for Office mode IPadresses). This means i dont have to register every user in smart dashboard.
So far so good.

But...RSA Radius does not separate upper/lower case !!

An external(consultant) is registred in "users" in smart dashboard. Uses RSA for authentication through RSA Radius.
When this user authenticates, everything is fine as long as he writes his username right.
If he uses lower-case instead of uppercase and vice versa in his username, the RSAauthentication will accept his RSA Token but will NOT hit the registred user in smart dashboard (RSA Radius does not separate upper/lower case), and go for the generic user. He will then get the same rights as the company users.

Is there a way to fix this?
I guess the external user needs to be in the "SecurID users" to enable Rsa Authentication.
Is it possible to assign the external user an ip adress other than OfficeMode ip ?
Other ideas?

Regards
// Walle
Reply With Quote