Wednesday, January 19, 2011

How to configure SecuRemote for a split DNS configuration, to make it get the Secure Domain Login functions working with a 4.1 SP2 firewall and a Windows 98 client

Many pointed out that getting SDL to work correctly can be very challenging.  From Gregor Munro an exact fix that worked for him.  He suggests cutting and pasting the solution (included below), directly into your $FWDIR/conf/dnsinfo.C file, and then editing it to suit your network.  The reason you should not try to start this file from scratch is that spacing and case are extremely important.  For example, using an "LMData" tag will not work - it needs to be "LMdata."
--Begin $FWDIR/conf/dnsinfo.C-- 
( 
:LMdata ( 
: ( 
:ipaddr (10.0.0.1) 
:name (MERLIN) 
:domain (ROUNDTABLE) 
) 
: ( 
:ipaddr (10.0.0.1) 
:name (MERLIN) 
) 
) 
) 
--End $FWDIR/conf/dnsinfo.C-- 

No comments: