How to configure CP-Gaia-SuperUser-Access attribute to be returned
Originally Published: 2019-11-27
Article Number
Applies To
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.4.0
Platform: null
Platform (Other): null
O/S Version: null
Product Name: null
Product Description: null
Issue
Resolution
Log on to the Operations Console on the RSA Authentication Manager instance hosting the RADIUS server > Click Deployment Configuration > RADIUS Servers > If prompted, enter the Super Admin User ID and password, and click OK > Select the RADIUS server hosted on this instance, and select Manage Server Files from the context menu > On the Manage Server Files page > Click the Dictionary Files tab > Click Add New > Select the checkpoint.dct file.
2) Edit the vendor.ini with the following:
vendor-product = CheckPoint
dictionary = checkpoint
ignore-ports = no
port-number-usage = per-port-type
help-id = 2000
3) Edit the dictiona.dcm and add @checkpoint.dct as following:
@bluesocket.dct
@chantry.dct
@checkpoint.dct
@cisco.dct
4) Edit the the radius.ini file.
4.1) Remove the semicolon from the ;[Configuration] section header line if present.
4.2) In the [Configuration] section, if a line exists with AuthenticateOnly as the header, remove the leading semicolon (if present), and make sure the value is 0, not 1. If the line doesn't exist, add this line underneath the line for AuthenticateOnly = 0 Make sure you use the same capitalization, and spacing.
5) Restart the radius and radiusOC service.
6) If the Security Console is opened please close this session and open a new one. Go to your RSA Radius Client for your Checkpoint and select "CheckPoint".
7) Create a new Radius Profile having these Check Point attributes:
CP-Gaia-User-Role
CP-Gaia-SuperUser-Access
8) Assign this Radius Profile to the userid
Related Articles
How to set PINs and navigate Next Tokencode Mode for RSA SecurID Tokens using NTRadPing on SecurID Authentication Manager … Number of Views Token Policy User PIN Complexity Number of Views Query for users with tokens and enabled for On-Demand Authentication in RSA Authentication Manager 8.2 Number of Views Error requesting CT-KIP token for RSA SecurID Software Token for Microsoft Windows through RSA SecurID Access Prime Self-S… Number of Views RSA Web Agent 8.0 - Error message - Unable to authenticate, Network timeout Number of Views
Trending Articles
RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide How to Upgrade Internal SHA-1 Certificates to SHA-256 in Authentication Manager Using rsautil RSA Release Notes for RSA Authentication Manager 8.8 RSA Authentication Manager 8.9 Setup and Configuration Guide
Don't see what you're looking for?
