How to configure CP-Gaia-SuperUser-Access attribute to be returned
Originally Published: 2019-11-27
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0
Platform: null
Platform (Other): null
O/S Version: null
Product Name: null
Product Description: null
Issue
Resolution
Log on to the Operations Console on the RSA Authentication Manager instance hosting the RADIUS server > Click Deployment Configuration > RADIUS Servers > If prompted, enter the Super Admin User ID and password, and click OK > Select the RADIUS server hosted on this instance, and select Manage Server Files from the context menu > On the Manage Server Files page > Click the Dictionary Files tab > Click Add New > Select the checkpoint.dct file.
2) Edit the vendor.ini with the following:
vendor-product = CheckPoint
dictionary = checkpoint
ignore-ports = no
port-number-usage = per-port-type
help-id = 2000
3) Edit the dictiona.dcm and add @checkpoint.dct as following:
@bluesocket.dct
@chantry.dct
@checkpoint.dct
@cisco.dct
4) Edit the the radius.ini file.
4.1) Remove the semicolon from the ;[Configuration] section header line if present.
4.2) In the [Configuration] section, if a line exists with AuthenticateOnly as the header, remove the leading semicolon (if present), and make sure the value is 0, not 1. If the line doesn't exist, add this line underneath the line for AuthenticateOnly = 0 Make sure you use the same capitalization, and spacing.
5) Restart the radius and radiusOC service.
6) If the Security Console is opened please close this session and open a new one. Go to your RSA Radius Client for your Checkpoint and select "CheckPoint".
7) Create a new Radius Profile having these Check Point attributes:
CP-Gaia-User-Role
CP-Gaia-SuperUser-Access
8) Assign this Radius Profile to the userid
Related Articles
Query for users with tokens and enabled for On-Demand Authentication in RSA Authentication Manager 8.2 Number of Views Token Policy User PIN Complexity Number of Views RSA Web Agent 8.0 - Error message - Unable to authenticate, Network timeout Number of Views How to configure Domain Authentication Client with Check Point VPN Client Number of Views Error requesting CT-KIP token for RSA SecurID Software Token for Microsoft Windows through RSA SecurID Access Prime Self-S… Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows RSA Authentication Manager 8.9 Patches and Hotfixes Readme Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
