RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-29 Thread Amy Hawke
Thanks Alan for the quick responses. We will look for other solutions in the meantime. Thanks, Amy _ It's simple! Sell your car for just $40 http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2Ecom%2Fcgi%2Dbi

Re: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Alan DeKok
Amy Hawke wrote: > We would like to get two factor authentication working using the > username/password from our current LDAP directories and then > username/RSA token code. That will likely *not* work. The NAS has to support this behavior, and usually doesn't. > The RSA product is unable t

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Amy Hawke
> Can you say what you're trying to do? What NAS equipment are you using? We would like to get two factor authentication working using the username/password from our current LDAP directories and then username/RSA token code. The RSA product is unable to connect to our current directories, so

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread tnt
>Both the LDAP authentication and proxying to RSA are working properly. To get >the two working together .. you need a two factor authentication manager. Freeradius isn't one. I don't know of any open source ones. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://w

Re: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Alan DeKok
Amy Hawke wrote: > Both the LDAP authentication and proxying to RSA are working properly. To > get the two working together I have tried changing the response for the LDAP > auth from Access-Accept to Access-Challenge if the request comes from the > correct NAS-IP. That won't work. Can yo

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-27 Thread Amy Hawke
Both the LDAP authentication and proxying to RSA are working properly. To get the two working together I have tried changing the response for the LDAP auth from Access-Accept to Access-Challenge if the request comes from the correct NAS-IP. if(NAS-IP-Address == 10.0.0.1){

Access-Challenge authentication via both LDAP and SecurID

2009-01-26 Thread Amy Hawke
Hi, I'm trying to implement two factor authentication using a CISCO VPN device, freeRADIUS, and RSA SecurID tokens. We would like to utilise existing username/password infrastructure by performing this part of the authentication on the LDAP directories and then the username/token-code aut