Comments on Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication
Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication Radius is a great standard. It is powerful enough to accomplish a great deal and simple enough to be easy to handle. Freeradius is an excellent, open source radius server that ships with many Linux variants. It is well documented and well supported. The WiKID Strong Authentication server is a commercial/open source two-factor authentication system that uses public key encryption to transmit PINs and one-time passcodes securely to software tokens running on Blackberries, cell phones, Palms, PocketPCs or, using the J2SE client, Linux, Macs and Windows PCs. You can think of WiKID like certificates, but without the hassles of white lists/black lists and more secure - because the PIN is validated on the server preventing offline brute-force attacks.
2 Comment(s)
Comments
Definitely going to be trying my hand at this over the weekend. I gave RSA a grilling over why there isn't enough multi-factor auth single-sign on in use, so it would be hypocritical of me not to be running something like this at home.
Hi,
I would like your help on understanding how exactly or where is FreeRadius a well documented radius server.
I have been trying for 6 days now to make freeradius2 work on RHEL/CentOS systems with LDAP and pam_radius for SSH logins and mostly failed - my efforts were mostly try and fail actions as there really is no real documentation on this subject.
FreeRadius home page is just giving enough to almost make you buy the books on freeradius they are selling. The mail list usually contains several times the same questions I have and the answers are usually not helpfull at all. This FreeRadius stuff is suppose to "just work" as they said on several ocasions but it just does not! Only the basic things, which are useless are working as is....
Can you please let me know where exactly have you managed to find real documentation on free radius?
Thanks,
Adi