Re: Multiple authentication methods at the same time?

2011-02-17 Thread Alan DeKok
Thomas A. Fine wrote: One of the things I love on the Internet (and by love I mean hate) is when someone asks a technical question, and they end up with a condescending policy answer. The answer I read includes a *technical* portion describing exactly how to do what you want. Another

Re: Multiple authentication methods at the same time?

2011-02-17 Thread Alexander Clouter
Christ Schlacta li...@aarcane.org wrote: Individual SSH keys are so 2010, you legacy SSHers need to get an SSH CA setup so you can just sign all your keys and deploy a single master certificate like the rest of us. You can do that? /me goes to investigate Cheers -- Alexander Clouter

Re: Multiple authentication methods at the same time?

2011-02-17 Thread Alexander Clouter
Thomas A. Fine f...@head.cfa.harvard.edu wrote: One of the things I love on the Internet (and by love I mean hate) is when someone asks a technical question, and they end up with a condescending policy answer. Welcome to the Internet, the place where tongue-in-cheek evaporates... The

RE: Multiple authentication methods at the same time?

2011-02-16 Thread Gary Gatten
Hi, I thought this would be easy but now I'm wondering if it will be possible at all. We are transitioning to a DMZ for all ssh logins. During phase one, people will use a standard (but different than internal) password which will be obtained either through LDAP or the passwd module (we just

Re: Multiple authentication methods at the same time?

2011-02-16 Thread Thomas A. Fine
On 2/16/11 5:36 PM, Gary Gatten wrote: I don't understand the question 100%. If you want different users to test different methods (LDAP, OTP, etc.) - that's fairly easy. If you want a given user Bob to test different methods concurrently, that sounds tricky - and I'm not sure what you wish

Re: Multiple authentication methods at the same time?

2011-02-16 Thread Alexander Clouter
Thomas A. Fine f...@head.cfa.harvard.edu wrote: I thought this would be easy but now I'm wondering if it will be possible at all. We are transitioning to a DMZ for all ssh logins. During phase one, people will use a standard (but different than internal) password which will be obtained

Re: Multiple authentication methods at the same time?

2011-02-16 Thread Thomas A. Fine
One of the things I love on the Internet (and by love I mean hate) is when someone asks a technical question, and they end up with a condescending policy answer. The first thing anyone should know (but many don't) about security is that everybody has different security needs, and their policy

Re: Multiple authentication methods at the same time?

2011-02-16 Thread Christ Schlacta
On 2/16/2011 15:02, Alexander Clouter wrote: Thomas A. Finef...@head.cfa.harvard.edu wrote: I thought this would be easy but now I'm wondering if it will be possible at all. We are transitioning to a DMZ for all ssh logins. During phase one, people will use a standard (but different than