Yubico Forum https://forum.yubico.com/ |
|
Yubikey And OpenVpn Access Server Authentication ? https://forum.yubico.com/viewtopic.php?f=5&t=687 |
Page 1 of 1 |
Author: | zaclye [ Thu Jun 16, 2011 9:32 am ] |
Post subject: | Yubikey And OpenVpn Access Server Authentication ? |
I have OpenVpn Access Server(Ubuntu) running at my home PC on Vmware that i always connect to from school. I am wondering how, if possible i can integrate my yubikey to that for a 2-factor authentication. Any knowledge that can get me moving in the right direction would be great. |
Author: | samir [ Fri Jun 17, 2011 6:01 am ] |
Post subject: | Re: Yubikey And OpenVpn Access Server Authentication ? |
The step by step instructions for integrating YubiKey based authentication to the OpenVPN server using the Yubico PAM module can be found at the link below: https://github.com/Yubico/yubico-pam/wi ... nVPNviaPAM We hope this helps! |
Author: | Andrew_Aust [ Fri Jul 08, 2011 5:16 am ] |
Post subject: | Re: Yubikey And OpenVpn Access Server Authentication ? |
What about the fact that both OPEN VPN and the Windows VPN client are limited to 48 character password? As the OTP is 44 chars, this only leaves you with a 4 char password, or, if you use more, your OTP is truncated, and will not validate? I have read the link posted above, and it does not address this question? I would really like the answer to this one as it has stumped me! Here is a prior thread addressing this: http://forum.yubico.com/viewtopic.php?f=8&t=471 Considering what Yubico says about Radius and VPN: http://www.yubico.com/radius Quote: A RADIUS server combined with an industry standard VPN or SSL based VPN solution provides a robust and flexible remote access solution. In any remote access scenario two-factor authentication is highly recommended I think there needs to be a valid solution to this issue - and not one that involves limiting user passwords to less than or equal to 4 chars! |
Page 1 of 1 | All times are UTC + 1 hour |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |