Yubico Forum
https://forum.yubico.com/

Trying to setup with no ldap or active directory
https://forum.yubico.com/viewtopic.php?f=29&t=1038
Page 1 of 1

Author:  AndrewP [ Mon Apr 15, 2013 6:18 pm ]
Post subject:  Trying to setup with no ldap or active directory

The goal I have is to just use the yubikey for authentication.
Manually creating a single user account with multiple keys would work as well for this.

Is there any way to do this? I'm willing to start from a fresh image any time in this process as I don't have anything configured yet.
I've been reading through the PDF and I haven't been able to find anyway that this might work.

Author:  samir [ Mon Apr 29, 2013 12:25 pm ]
Post subject:  Re: Trying to setup with no ldap or active directory

Hello,

Please try the following steps:

1. Go to "Global Configuration" >> "General" >> "Authentication Profile" = "Profile-1" >> "Append OTP to" = "Password"

2. "Enable Password Authentication through YubiRADIUS" = "No"

3. ssh to YubiRADIUS VA and follow the steps below

# cd /etc/freeradius/sites-available

4. Comment entries in "default" and "inner-tunnel" file:

# vim default

comment "ldap" from "authorize" section
# ldap

Comment pap entry as shown below from "authenticate" section:

authenticate {

Auth-Type PAP {
perl
# pap
}

# vim inner-tunnel

comment "ldap" from "authorize" section
# ldap

Comment pap entery as shown below:

authenticate {

Auth-Type PAP {
perl
# pap
}

5. Restart the freeradius using following command:

# /etc/init.d/freeradius restart

6. Try authentication testing
===================================

If you have any issues, please write to "support@yubico.com".

Thanks and best regards,
Samir.

Author:  AndrewP [ Wed May 01, 2013 7:46 pm ]
Post subject:  Re: Trying to setup with no ldap or active directory

Using the above, what username and password should I be attempting to use when testing?

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/