Re: [c-nsp] RSA and rancid

2009-11-11 Thread Michael K. Smith
On 11/11/09 6:03 AM, "Jens Link" wrote: > Mark Meijerink writes: > >> Is anyone of you using RSA tokens and rancid? If so, please explain how >> you make this work. Thanks in advance for your comments. > > Friend of mine told me that a combination of a web cam, fuzzyOCR and > some Perl code is

Re: [c-nsp] RSA and rancid

2009-11-11 Thread Jens Link
Mark Meijerink writes: > Is anyone of you using RSA tokens and rancid? If so, please explain how > you make this work. Thanks in advance for your comments. Friend of mine told me that a combination of a web cam, fuzzyOCR and some Perl code is working fine for token based auto logins. I haven't

Re: [c-nsp] RSA and rancid

2009-11-11 Thread Alexander Clouter
Dirk-Jan van Helmond wrote: > > Don't use RSA authentication for automated processes? > Use local accounts, or if your devices support it SSH public keys are a handy option. To be honest you would be crazy to rely just on RSA authentication as if your RADIUS server is dead you will not be able

Re: [c-nsp] RSA and rancid

2009-11-10 Thread Dirk-Jan van Helmond
Hi Mark, Don't use RSA authentication for automated processes? If the authentication isn't being sent plaintext, there is no added security in using one time passwords for automated processes. Regards, Dirk-Jan On Nov 10, 2009, at 7:14 PM, Mark Meijerink wrote: > Hi there, > > I am looking

[c-nsp] RSA and rancid

2009-11-10 Thread Mark Meijerink
Hi there, I am looking for a way to combine RSA tokens to authenticate to devices and use rancid to make backups of my device configuration. The RSA tokens use radius as authentication method. The problem is that rancid is an automated process and the rancid process is not able to watch on a RS