Securemote Authentication using Windows NT domain accounts

[ivanlimin]

Hi guys,

What method or authentication that I should use to authenticate securemote users to my check point. The users must use the domain accounts in their Windows NT 4.0 PDC. I had tried using many options but are not working. Everything is working fine if I use Windows 2000 as the LDAP server. But I need securemote users authenticated to their vpn site using domain accounts in Windows NT 4.0. Please help. If you guys have any ideas with configuration guides will be much helpful. Thank you very much.

[Peter]

Try to install RADIUS server in your NT4 domain and to use RADIUS authentication for SecureRemote users.

[ivanlimin]

well, I tried using SDL. I created the LMHOST file with the Windows NT4 name and domain name in the NOKIA box. But still I can't authenticate throught the check point. Am I doing the right things? Any ideas?

[alienbaby]

NT 4 Option pack has a function called Internet Authentication Services.

IAS is the Radius server for NT 4.

Install it on a member or PDC/BDC. Configured it.

Create the Radius server object in CheckPoint pointing to the server you install IAS on.

It does require the Dial-in permission be set on each user in the Domain to be successfully authentated, but that is a good thing.