Firewall-1

Re: [FW-1] Changing VPN client password

Subject: Re: [FW-1] Changing VPN client password
From: Joe Matusiewicz <joem AT NIST DOT GOV>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Thu, 26 Feb 2004 12:41:12 -0500
At 09:50 AM 2/26/2004, Reinhard Stich wrote:
At 15:14 26.02.2004, Joe Matusiewicz wrote:
At 12:03 AM 2/26/2004, Naseer Inamdar wrote:
Hi,

Can anybody let me know how to set password policy ( to set the password
alphanumerc and minimum characters of 8 , expiring every 60days) for VPN
clients accessing resources via Secureremote. Is this possible in
checkpoint fp3 or R55

Do you mean having your users reset their passwords every 60 days?  I
didn't know this was possible using SecuRemote unless you used ldap.

hi,

it is not possible if you use fw1-users because there only fw1 admins can
change the password.

you can use a 3rd-party authentication product that supports that.

I have tested SecuRemote with Netscape's ldap and it will allow your user's
to change their password to a https server (included with the ldap
software).  I also was able to tie SecuRemote authentication with Radius
one time passwords.

-- Joe

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>