RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-29 Thread Amy Hawke
Thanks Alan for the quick responses. We will look for other solutions in the meantime. Thanks, Amy _ It's simple! Sell your car for just $40

Re: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Alan DeKok
Amy Hawke wrote: Both the LDAP authentication and proxying to RSA are working properly. To get the two working together I have tried changing the response for the LDAP auth from Access-Accept to Access-Challenge if the request comes from the correct NAS-IP. That won't work. Can you

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread tnt
Both the LDAP authentication and proxying to RSA are working properly. To get the two working together .. you need a two factor authentication manager. Freeradius isn't one. I don't know of any open source ones. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Amy Hawke
Can you say what you're trying to do? What NAS equipment are you using? We would like to get two factor authentication working using the username/password from our current LDAP directories and then username/RSA token code. The RSA product is unable to connect to our current directories, so

Re: Access-Challenge authentication via both LDAP and SecurID

2009-01-28 Thread Alan DeKok
Amy Hawke wrote: We would like to get two factor authentication working using the username/password from our current LDAP directories and then username/RSA token code. That will likely *not* work. The NAS has to support this behavior, and usually doesn't. The RSA product is unable to

RE: Access-Challenge authentication via both LDAP and SecurID

2009-01-27 Thread Amy Hawke
Both the LDAP authentication and proxying to RSA are working properly. To get the two working together I have tried changing the response for the LDAP auth from Access-Accept to Access-Challenge if the request comes from the correct NAS-IP. if(NAS-IP-Address == 10.0.0.1){