CommentMySecurID-page

June 21, 2004 11:19 am by vulcan.rsasecurity.com

RSA Has their own PAM Securid module now. Strangely this module does not seem to be working with OpenSSH? 3.7.p1 or higher. I compiled OpenSSH? with the options "./configure --with-cflags=-DUSE_POSIX_THREADS --with-libs=-lpthread --with-pam make make install" and it wotrks to the extent that it prompts for a user name and passcode. The log shows that auth has been accepted but i can not get to the client machine.

RSA PAM and OpenSSH? compiled with option "--with-pam" works fine on Linux AS 3.0. I am having problem on Linux 7.3.

Any suggestion ???

Since RSA is reading/posting on this site: RSA ACE 5.x does not seem to have an examples-directory with i.e. libclnt.a and so on. Would it be possible to get the content of the former /var/ace/examples directory for publishing it on this website? Poeple often ask for it. --Joerg

June 2, 2003 12:36 pm by nk05.post.ch
Hi
Thanks for your documentation. Do you think this could be possible to use an LDAP server to store the SECURID passphrases ?
Bye
mirko

Hi Mirko,
I have only used ACE 5.0 so far. However the LDAP-abilities of 5.1 should not be miles away from 5.0. You only can import LDAP users from an existing LDAP-Server into the ACE Server. As far as it comes to reading and storing data from and to LDAP servers in realtime: there is no such animal.
--Joerg

Hello, I've noticed that now RSA seems to have their own PAM module available:

https://www.rsasecurity.com/download/index.html

Haven't been able to try it yet though..

Bye, Johan

---

RSA does have their own PAM module - but it supposedly only supports <nop>OpenSSH? on Linux (due to it's requirement of keyboard-interactive). However, I require support of sudo as well, and I need <nop>OpenSSH? support on Linux and Solaris. Another item that I'm concerned with is LDAP integration. If anyone here can tell me how to integrate 5.2 with a custom schema'd <nop>OpenLDAP?, it would be much appreciated. I can't seem to find anyway to make ace/server not use one of the three predefined schema's and define my own.

I've set up a Yahoo! group for users of the RSA SecurID products -- no official connection to RSA, just a place to share tips and tricks and gripe about bugs.

The signup address is mailto:securid-users-subscribe@yahoogroups.com, or to browse content, see http://groups.yahoo.com/group/securid-users

Ace

--- Pls use the Button "ändern" to leave any comments, questions or suggestions. I will either comment them or incorporate them into my mainpages. --Joerg