freeradius and yubikeys

[Arran Cudbard-Bell]

On 12 May 2014, at 19:52, Scott Ireland <sireland+freeradius at ualberta.net> wrote:

> FWIW, I've had very little trouble getting YubiKeys to work (in OATH-HOTP mode) with the Google Authenticator PAM through FreeRADIUS.  The benefit to that was that it allowed me to support YubiKeys and the Google Authenticator app with the same configuration so that users could have one or the other

That's neat.

> (YubiKeys are definitely more secure and more universal than smartphone apps, but there is a cost attached to purchasing and (re-)programming them).

What cost do you see in (re-)programming them out of interest?

There is a yubikey-personalization CLI utility. Integrate that with some large USB hubs, D-BUS and some undergraduates and I imagine the programming process would be pretty painless?

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140512/603f2546/attachment-0001.pgp>