On 12 May 2014, at 19:52, Scott Ireland <sireland+freeradius@ualberta.net> wrote:
FWIW, I've had very little trouble getting YubiKeys to work (in OATH-HOTP mode) with the Google Authenticator PAM through FreeRADIUS. The benefit to that was that it allowed me to support YubiKeys and the Google Authenticator app with the same configuration so that users could have one or the other
That's neat.
(YubiKeys are definitely more secure and more universal than smartphone apps, but there is a cost attached to purchasing and (re-)programming them).
What cost do you see in (re-)programming them out of interest? There is a yubikey-personalization CLI utility. Integrate that with some large USB hubs, D-BUS and some undergraduates and I imagine the programming process would be pretty painless? Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2