Authentication problem 1

[elina24]

Hi!
What my company wants to do is: have an internet web site on a web server that is sitting between 2 firewalls and authenticate users using their nt domain credentials. They also want to challenge users to change their nt passwords the first time they try to log in and then every 60 days.
The domain is not between the firewalls, it's inside.
I would appreciate any help!

 

[pansophic]

It sounds as if you want to set up an authentication server that is used by both systems. You could use RADIUS or TACACS or LDAP or Kerberos. That way you only have to allow the authentication protocol through the firewall.

Small holes are better than big ones!

http://www.infoseceng.com/radius.htm

http://www.seifried.org/security/www-auth/section-4.html

pansophic