Thanks for the help, I will put this email in Saved so I will have it later. :-)

On Wed, Oct 19, 2011 at 1:54 PM, Mario Ceresa <mrceresa@fedoraproject.org> wrote:
Hello all!

I'm an happy possessor of a yubikey and I use it both for FAS
authentication and for ssh access.

The configuration is the following:

slot 1: fedora OTP configured with fedora-burn-yubikey -u
slot 2: yubico OTP. Using the command line tool shipped with fedora
gave me some problems, so I used the one from yubico
(http://wiki.yubico.com/files/YubiKey%20Personalization%20Tool%20Installer-lin.tgz)
which worked flawlessy!

Regards,

Mario

On 13 October 2011 19:49, Toshio Kuratomi <a.badger@gmail.com> wrote:
> On Thu, Oct 13, 2011 at 11:45:35AM +0200, Thomas Spura wrote:
>> On Tue, 11 Oct 2011 23:02:36 -0700
>> Toshio Kuratomi wrote:
>>
>> > On Tue, Oct 11, 2011 at 11:11:39PM -0400, Paul Wouters wrote:
>> > > On Tue, 11 Oct 2011, Nathanael D. Noblet wrote:
>> > >
>> > > > As far as I know if you burn the key you will lose the ability to
>> > > > use the yubikey's servers and I'm guessing coincidentally the
>> > > > lastpass as well. I have seen that you are allowed to upload a
>> > > > new key to their servers to restore its useability. So that may
>> > > > be one avenue to look into.
>> > >
>> > > If these keys are still the AES symmetric keys, do not upload them
>> > > to any third party - those type of keys cannot and should not be
>> > > used with different entities. I thought the newer yubi keys had
>> > > more then one slot though, so perhaps one slot can be used for FAS,
>> > > and the other for the yubisoft servers.
>> > >
>> > I currently have my yubikey set up to do this (slot 1 is Fedora, slot
>> > 2 is for yubikey servers).
>>
>> Could you describe how you did that?
>> All I could find is this instruction set [1].
>>
>> Maybe that could be added there.
>>
> http://lists.fedoraproject.org/pipermail/infrastructure/2010-October/009569.html
>
> Things you do one-time you tend to forget.  That's what I have.  Feel free
> to enhance the wiki page as you go if you do this.
>
> -Toshio
>
> --
> devel mailing list
> devel@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
>
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel