Yubico Forum
https://forum.yubico.com/

Single factor with username + Yubikey?
https://forum.yubico.com/viewtopic.php?f=29&t=964
Page 1 of 1

Author:  Espen [ Thu Feb 21, 2013 11:11 pm ]
Post subject:  Single factor with username + Yubikey?

Hi,

I managed to set up yubiradius with VMware View.

Only annoying thing is that I have to enter my password twice. Once with the radius authentication and in the next dialog box when I login to windows.
Maybe I missed it, but is it possible to only do Yubikey + username mapping with YubiRadius?

Author:  ronsdavis [ Fri Feb 22, 2013 1:47 am ]
Post subject:  Re: Single factor with username + Yubikey?

Assuming you are usins 3.6.0
If you set yubiradius to "Append OTP to" password field, and then set "Enable Password Authentication through YubiRADIUS" to no, this should achieve what you are looking for.
For added security,you can then have VMware View carry over the username by setting "Enforce 2-factor and Windows user name matching".

The only issue we have with this is using Teradici thin clients. Once it sees that you have configured RADIUS auth, it assumes said auth is RSA, and limits the password field to 16 characters. By far not long enough for a yubikey.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/