1. Integrating LDAP into Check Point Secure Virtual Network Yasushi Kono (ComputerLinks Germany)

2. We will learn, how to extend a schema of MS Active Directory via LDAP-SSL and how to integrate LDAP into a Check Point Infrastructure.

3. LDAP Integration is that easy…

4. The steps required to configure the Schema Extension of MS Active Directory through LDAP-SSL: 1.Locate the schema_microsoft_ad.ldif file in the file system of the SmartCenter Server 2.Replace the string „DOMAINNAME“ with the name of your Active Directory domain name (e.g. dc=cpug,dc=org) 3.Configure a policy to allow ldap-ssl communication between SmartCenter and LDAP Server

5. I will go through the steps to show you…

6. What to do next? 1.If you are using Windows 2000, check the „The schema may be modified on this Domain Controller“ parameter in order to be able to extend the schema. 2.Use the ldapmodify command to extend the schema.

7. The whole syntax of the ldapmodify command: ldapmodify –c –h 172.16.0.2 –D “cn=Administrator,cn=users,dc=cpug,dc=org“ –w password –Z –p 636 –f $FWDIR/lib/ldap/schema_microsoft_ad.ldif

8. How can you check if the schema extension is done successfully? Try to launch the MMC Snap-In „Active Directory Schema“ and look for the object classes fw1template and fw1person.

9. After successfully extending the schema, we will use SmartDirectory and configure the LDAP Account Unit. Let‘s see it in our Lab environment…

10. Thanks for attending this presentation!