Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID or a smart card? Is there a good package that supports some sort of standard password-less authentication? Any experiences using smart cards or RSA Secure IDs with Linux would be welcomed. respectfully, Joseph
Joseph wrote:
Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID or a smart card?
FreeRADIUS proxies the request to the RSA RADIUS server. There's not much else that can be done.
Is there a good package that supports some sort of standard password-less authentication?
Nope. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Joseph wrote:
Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID or a smart card?
FreeRADIUS proxies the request to the RSA RADIUS server.
There's not much else that can be done.
So, in short, you would get a commercial RSA Radius server and proxy requests from freeradius to the RSA Radius server. Is there any way a person could use the ID of a usb key with a radius client/server setup? regards, Joseph
Joseph wrote:
So, in short, you would get a commercial RSA Radius server and proxy requests from freeradius to the RSA Radius server.
Yes.
Is there any way a person could use the ID of a usb key with a radius client/server setup?
What exactly do you mean by that? Most USB token systems are proprietary, so the answer (as above) is "buy the commercial server and it will work". Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Use the pam_securid module for linux/sun that's included with the RSA server. It works quite well and PAM provides a simple interface. Dan On Mon, 2007-01-29 at 18:23 -0500, Joseph wrote:
Does anyone have pointers on setting up a solution where freeradius authenticates against an RSA Secure ID or a smart card?
Is there a good package that supports some sort of standard password-less authentication?
Any experiences using smart cards or RSA Secure IDs with Linux would be welcomed.
respectfully, Joseph - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Dan Geist | dan.geist@cox.com | (404) 269-6822 Cox Communications - Engineering Security
participants (3)
-
Alan DeKok -
Dan Geist -
Joseph