On 6/22/06, Hendry <wirawijaya@...> wrote:
> I'm planning to implement RSA SecurID to protect user when login to
> Bastian Host. The Bastian Host is running in Linux 2.1. My concern is
> RSA didn't support Linux 2.1 OS anymore.
Welcome to my world. RSA never did support OpenBSD.
> Is there any suggestion how to implement this ??
Run your ACE/Server on a supported platform inside the network with
RADIUS services enabled, and configure user authentication on the
Bastion host to use RADIUS authentication to the internal ACE/Sever.
This same solution will work with any OS or device which can handle
RADIUS, with a couple of minor caveats (e.g. the client must not try
to reuse the "password").
In the long run OATH (http://www.openauthentication.org/) should
resolve all of the "my OS isn't supported by my strong authentication
vendor" problems, but don't hold your breath.
Kevin