freeradius and yubikeys

Arran Cudbard-Bell a.cudbardb at
Mon May 12 23:25:04 CEST 2014

On 12 May 2014, at 22:19, Arran Cudbard-Bell <a.cudbardb at> wrote:

> On 12 May 2014, at 19:52, Scott Ireland <sireland+freeradius at> wrote:
>> FWIW, I've had very little trouble getting YubiKeys to work (in OATH-HOTP mode) with the Google Authenticator PAM through FreeRADIUS.  The benefit to that was that it allowed me to support YubiKeys and the Google Authenticator app with the same configuration so that users could have one or the other
> That's neat.
>> (YubiKeys are definitely more secure and more universal than smartphone apps, but there is a cost attached to purchasing and (re-)programming them).
> What cost do you see in (re-)programming them out of interest?
> There is a yubikey-personalization CLI utility. Integrate that with some large USB hubs, D-BUS and some undergraduates and I imagine the programming process would be pretty painless?

Mmmm usb.

Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list