Re: RSA SecurID Pam Module Support?

2007-05-04 Thread David Robillard

We have recently purchased an RSA SecurID Appliance and there are no
native libraries for *BSD OS's.  I have downloaded and installed the
appropriate files within the Linux Compat environment, but I'm not
having any success making it work.  Specifically, the key file in
question is /compat/linux/lib/pam_securid.so.  When I add the
appropriate configuration line to /etc/pam.d/sshd and attempt to log in
I get the following:

May  3 09:43:01 ad-mon01 sshd[30508]: in openpam_load_module(): no
/compat/linux/lib/pam_securid.so found
May  3 09:43:01 ad-mon01 sshd[30508]: fatal: PAM: initialisation failed

Of course, the file actually does exist.

-rwxr-xr-x  1 1047  900  895304 May  2 11:13
/compat/linux/lib/pam_securid.so

Has anyone had any success getting this .so to work under FreeBSD,
specifically 6.2 Release?


Hi Michael,

We're also running some RSA SecurID Appliances. Since we need the
support from RSA and that FreeBSD is not listed in their supported OS
matrix, we decided to use RedHat for the front-end HTTP servers to run
their module. All the rest of our business application that requires
RSA authentication is running under FreeBSD.

IMHO you should only use an RSA supported OS to run their module.
Because otherwise you won't receive any help from them if they know
you're running this under FreeBSD. Sad, but unfortunately true.

Good luck,

David
--
David Robillard
UNIX systems administrator  Oracle DBA
CISSP, RHCE  Sun Certified Security Administrator
Montreal: +1 514 966 0122
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RSA SecurID Pam Module Support?

2007-05-03 Thread Michael K. Smith - Adhost
Hello All:

We have recently purchased an RSA SecurID Appliance and there are no
native libraries for *BSD OS's.  I have downloaded and installed the
appropriate files within the Linux Compat environment, but I'm not
having any success making it work.  Specifically, the key file in
question is /compat/linux/lib/pam_securid.so.  When I add the
appropriate configuration line to /etc/pam.d/sshd and attempt to log in
I get the following:

May  3 09:43:01 ad-mon01 sshd[30508]: in openpam_load_module(): no
/compat/linux/lib/pam_securid.so found
May  3 09:43:01 ad-mon01 sshd[30508]: fatal: PAM: initialisation failed

Of course, the file actually does exist.

-rwxr-xr-x  1 1047  900  895304 May  2 11:13
/compat/linux/lib/pam_securid.so

Has anyone had any success getting this .so to work under FreeBSD,
specifically 6.2 Release?

Regards and Thanks,

Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RSA SecurID Pam Module Support?

2007-05-03 Thread Vince

Michael K. Smith - Adhost wrote:

Hello All:

We have recently purchased an RSA SecurID Appliance and there are no
native libraries for *BSD OS's.  I have downloaded and installed the
appropriate files within the Linux Compat environment, but I'm not
having any success making it work.  Specifically, the key file in
question is /compat/linux/lib/pam_securid.so.  When I add the
appropriate configuration line to /etc/pam.d/sshd and attempt to log in
I get the following:

May  3 09:43:01 ad-mon01 sshd[30508]: in openpam_load_module(): no
/compat/linux/lib/pam_securid.so found
May  3 09:43:01 ad-mon01 sshd[30508]: fatal: PAM: initialisation failed

Of course, the file actually does exist.

-rwxr-xr-x  1 1047  900  895304 May  2 11:13
/compat/linux/lib/pam_securid.so

Has anyone had any success getting this .so to work under FreeBSD,
specifically 6.2 Release?

  
The last time i tried this i had no luck (2 or 3 years ago, i forget 
now)  I was trying to authenticate against ACE server rather than a 
Appliance and finally ended up using pam_radius and using the ACE server 
as a radius server which worked pretty well.


good luck,
Vince



Regards and Thanks,

Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]