Jclntauth automates authentication to Firewall-1
Since 2 years we are internally working
with a tool called jclientauth. This tool
allows us to automate authentication on
firewalls from Checkpoint or from Nokia. We
use it either on Windows XP/2000, on Linux or
on Solaris. This tool has been developped by
TLA to allow processes that need to access
other ressources on Internet to pass through
the authentication mechanism needed by a
firewall. 
With Jclntauth you also simplify authentication procedure for users. You can propose different configuration to authenticate on different firewalls. This is for example usefull in our work at different customer location. For each customer we have a configuration file, this allows us a quick and easy authentication without reducing security.
License
This tool can be downloaded for a personnal
usage limited to one exemplar. It cannot be
transmitted in any form. For a commercial
usage or for several systems installed with
our software a license must be purchased from
TLA.
Installation
The program is written in Java and as such needs a java environment. On certain systems the java environment might not be present. You will need to install the JRE environment from SUN.
http://java.sun.com
Define a directory where you want to install jclntauth
Configuration
First of all the configuration will contain
sensible information. As such it must be
protected by the operating system security
mechanism. This means that the only user
allowed to have a read permission on this file
must be the automated process. A configuration
file must be provided to the tool in order to
know IP address of the firewall, username and
password as well as the action to perform. By
action we mean that the process can be
authorized or that it can be deauthorized. The
configuration file must be placed in the same
directory as is jclntauth. below is the
content of the configuration file called tst
| url=http://194.191.78.17:900 username=toto password=titi action=1 |
Usage
java -jar jclntauth.jar -f tst
Configuration for authorization and deauthorization
In this context we have 2 configuration files, that are called on and off. Jclntauth will use take once on as parameter and the other time it will take off as parameter.
ON
| url=http://194.191.78.17:900 username=toto password=titi action=1 |
OFF
| url=http://194.191.78.17:900 username=toto password=titi action=2 |
Utilization
java -jar jclntauth.jar -f on
do_ something
java -jar jclntauth.jar -f off
Process automation under Windows
To automate a process you will find here below 2 small scripts that will perform authorization and deauthorization under Windows. Jclntauth is installed in directory C:\bin\jclntauth
jon.bat
| ECHO OFF echo %1 set location=%cd% cd C:\bin\jclntauth java -jar jclntauth.jar -f on %1 cd /D %location% |
joff.bat
| ECHO OFF echo %1 set location=%cd% cd C:\bin\jclntauth java -jar jclntauth.jar -f off %1 cd /D %location% |
Process automation under Unix
Under Unix the program is called in the same way. Scripts can be added to ease uage of the tool.
Multiples firewalls
You will have several configuration files, one for each firewall. If a specific configuration file is prepared for a specific firewall you will call the tool with
java -jar jclntauth.jar -f conf_file_specific_firewall_on
and
java -jar jclntauth.jar -f conf_file_specific_firewall_off
Travelling user.
Mobile users if they always authenticate to the same firewall, they are in a single firewall configuration mode. If a travelling user is chnaging locations and as such changes the firewall through which he has to authenticate, then he must behave as described in section about multiples firewall.
Download
| size | ||
| Windows 2000/XP/.Net | jclntauth.zip | |
| Unix | jclntauth.tar.Z |
Download Java environment
To download the JRE follow the link below.
http://java.sun.com/j2se/1.4.1/download.html
353