A (not) new security idea
Kevin Old
kevinold at gmail.com
Wed Jan 12 15:41:58 UTC 2005
On Thu, 14 Oct 2004 04:46:43 +0100, Jude <fedora at wastedtimes.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wednesday 13 October 2004 20:36, Brian Fahrlander wrote:
>
> > Keyfobs. These little USB droplets of cyberspace. How about we, as
> > one of the largest collections of Linux people out there, standardize
> > some software to fit into PAM to do this:
> >
> > 1. Upon insertion, ask for the passphrase a'la local-agent.
> >
> > 2. When validated, use these credentials for everything.
> >
> > Sounds like a simple idea, but for some reason the powers that be
> > can't seem to 'get off the pot' and placate hundreds of vendors to
> > define a standard. Standards are what we're about. Let's make our
> > own.
>
> As a starting point, you might want to look at pam_usb, "a PAM module that
> enables authentication using a USB storage device through DSA
> private/public keys."
>
> http://freshmeat.net/projects/pam_usb/
Sorry to be late on this thread, but I'm interested in using pam_usb
with FC 2 and 3 and was wondering if anyone has it working? The
Quickstart documentation seems pretty straight forward, but I'm a
little reluctant to try it as I've never done anything with PAM
before.
Can anyone offer any advice on using pam_usb?
Thanks,
Kevin
--
Kevin Old
kevinold at gmail.com
More information about the fedora-list
mailing list