Date: Mon, 30 Mar 2009 12:57:23 -0500
From: Dennis Gilmore <dennis(a)ausil.us>
Reply-To: Fedora Infrastructure <fedora-infrastructure-list(a)redhat.com>
To: Fedora Infrastructure <fedora-infrastructure-list(a)redhat.com>
Subject: More auth options
So doing a liitle looking around I cane across some options that look
interesting, the following options would mean you need to physically have
something to login.
It would require a pam module and for us to setup a server for managing keys.
it looks to be fairly low cost. it would implement a 2 facter
it moves the public key from your hard drive to something you physically need
ubikey is max USD$25 where the etoken is probably at least USD$30. I would
think that with yubikey we could work out a deal with them to get a discount
in return for us being a case study/prominent user of there product. all of
the software for yubikey AFAICT is open source. some of it would require
I know RSA is a bit expensive, but it might be worth thinking about RSA
tokens as well. They have a OTP that changes every 60 seconds plus you
have to add a PIN as well.
Red Hat, Inc