A former employer implemented a smart card + kerberos system which was used mostly (but not exclusively) for secure root access. A version of sudo talked to an independent kerberos realm. You fed sudo your key from the Secure-ID plus your password for the kerberos realm and tada, root. Or authentication on a few select other systems.
I couldn't tell you cost though. It was whatever the ID programmer box cost + the ID cardlets + the sweat from my coworker who had to bang the systems together. I'm also aware that some Major Financial-Type Institutions often use Secure-ID-like frobs for everything from authentication to being able to get onto the internal network. _______________________________________________ Tech mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
