>We used to use SecurID cards along with our AFS accounts (SGI environment).
> The SecurID challenge is implemented as a login shell in your password file.
> By the time you invoke it, you've already sucessfully authenticated with your
>AFS password.  There was nothing we had to do to get SecurID & AFS to work
>together since they involve separate authentication steps.

If somebody monitors the login to get your password, what prevents
them from logging in as themselves, and then klog'ing to you?

Mike
--
--
Michael D. Sofka                  [EMAIL PROTECTED]
CIS Sr. Systems Programmer        AFS, e-mail, usenet, ftp, NIS, NTP.
Rensselaer Polytechnic Institute, Troy, NY.  http://www.rpi.edu/~sofkam/

Reply via email to