Yubico Forum

Re: Question about YubiRADIUS: "copy" users?

2013-02-22T16:15:09+01:00

Neal...I saw your post before, the SA does not use ScreenOS..

thanks for the input

Statistics: Posted by rmaudsley — Fri Feb 22, 2013 4:15 pm

Re: Question about YubiRADIUS: "copy" users?

2013-02-22T14:29:39+01:00

Hi rmaudsley,

I'm not the original poster however I wrote a guide to getting a Juniper Netscreen SSG-140 working with YubiRadius a few months ago. The SSG-140 uses ScreenOS as its operating system, I'm not sure what the SA2500 uses but in case there is any overlap you might be able to use some of it.

http://www.digitalllama.net/2012/03/net ... -with.html

Regards,
Neal.

Statistics: Posted by Neal — Fri Feb 22, 2013 2:29 pm

Re: Question about YubiRADIUS: "copy" users?

2013-02-20T19:49:02+01:00

Any way you could post some detailed info on how you configured the Juniper SA2500 ?

Statistics: Posted by rmaudsley — Wed Feb 20, 2013 7:49 pm

Re: Question about YubiRADIUS: "copy" users?

2012-08-15T12:41:12+01:00

Hello kevbo, what kind of Juniper VPN device are you using and how did you set it up? I'm trying to set up a similar configuration, but then with an LDAP server. I can authenticate against LDAP and YubiRADIUS just fine but I just don't manage to get the Juniper device we're using (an SA2500) to send the right data or to have the YubiRADIUS server understand the data that gets sent. Basically I'm having this issue: http://forums.juniper.net/t5/SSL-VPN/Yu ... rue#M13337
So if I enter the YubiKey OTP as the secondary password it doesn't work. If I prepend that OTP with the LDAP password it works. But maybe I'm overseeing something in the Juniper config or I've simply set it up wrong.

Thanks in advance!

Jeremy

Edit: I've decided to keep it this way, so LDAP password + OTP, as this is apparently the standard way to do it.

Statistics: Posted by AutoStatic — Wed Aug 15, 2012 12:41 pm

Re: Question about YubiRADIUS: "copy" users?

2012-08-09T14:55:59+01:00

Thanks...I went ahead and set up a YubiRadius server, and it is working as described.

I'm having some trouble with having two units in a synchronization group where if one fails, the other quits working, but that's a different question and in a different thread.

Statistics: Posted by kevbo — Thu Aug 09, 2012 2:55 pm

Re: Question about YubiRADIUS: "copy" users?

2012-07-30T14:51:47+01:00

Hello,

YubiRADIUS VA use AD/LDAP for the single factor authentication (i.e username and passowrd). YubiRADIUS import users and groups information from AD/LDAP and there is no password information stored on YubiRADIUS DB. The username and password is getting authenticated with live AD/LDAP for every authentication. For the two factor authentication using YubiRADIUS the credentials like username, password and OTP can be provided. YubiRADIUS then first authenticate OTP with respective OTP validation server and sends username and password to AD/LDAP for authentication.

Hope this helps!

Thanks and best regards,
Samir.

Statistics: Posted by samir — Mon Jul 30, 2012 2:51 pm

Question about YubiRADIUS: "copy" users?

2012-07-25T21:53:08+01:00

I need a RADIUS server for a Juniper VPN to authenticate users to. I'd like it to verify username/password with our AD domain, along with using a Yubikey OTP.

It looks like YubiRADIUS might be able to do what I want.

Reading through its documentation, the one thing that confuses me is that it seems to want to keep a copy of user data from the AD in its own LDAP server, rather than live query. Is that the case? Or can it work in a mode where it is live querying an Active Directory?

Thanks,

Kevin

Statistics: Posted by kevbo — Wed Jul 25, 2012 9:53 pm