yubikey

[Nathan O.]

Thanks for the help, I will put this email in Saved so I will have it later.
:-)

On Wed, Oct 19, 2011 at 1:54 PM, Mario Ceresa <mrceresa at fedoraproject.org>wrote:

> Hello all!
>
> I'm an happy possessor of a yubikey and I use it both for FAS
> authentication and for ssh access.
>
> The configuration is the following:
>
> slot 1: fedora OTP configured with fedora-burn-yubikey -u
> slot 2: yubico OTP. Using the command line tool shipped with fedora
> gave me some problems, so I used the one from yubico
> (
> http://wiki.yubico.com/files/YubiKey%20Personalization%20Tool%20Installer-lin.tgz
> )
> which worked flawlessy!
>
> Regards,
>
> Mario
>
> On 13 October 2011 19:49, Toshio Kuratomi <a.badger at gmail.com> wrote:
> > On Thu, Oct 13, 2011 at 11:45:35AM +0200, Thomas Spura wrote:
> >> On Tue, 11 Oct 2011 23:02:36 -0700
> >> Toshio Kuratomi wrote:
> >>
> >> > On Tue, Oct 11, 2011 at 11:11:39PM -0400, Paul Wouters wrote:
> >> > > On Tue, 11 Oct 2011, Nathanael D. Noblet wrote:
> >> > >
> >> > > > As far as I know if you burn the key you will lose the ability to
> >> > > > use the yubikey's servers and I'm guessing coincidentally the
> >> > > > lastpass as well. I have seen that you are allowed to upload a
> >> > > > new key to their servers to restore its useability. So that may
> >> > > > be one avenue to look into.
> >> > >
> >> > > If these keys are still the AES symmetric keys, do not upload them
> >> > > to any third party - those type of keys cannot and should not be
> >> > > used with different entities. I thought the newer yubi keys had
> >> > > more then one slot though, so perhaps one slot can be used for FAS,
> >> > > and the other for the yubisoft servers.
> >> > >
> >> > I currently have my yubikey set up to do this (slot 1 is Fedora, slot
> >> > 2 is for yubikey servers).
> >>
> >> Could you describe how you did that?
> >> All I could find is this instruction set [1].
> >>
> >> Maybe that could be added there.
> >>
> >
> http://lists.fedoraproject.org/pipermail/infrastructure/2010-October/009569.html
> >
> > Things you do one-time you tend to forget.  That's what I have.  Feel
> free
> > to enhance the wiki page as you go if you do this.
> >
> > -Toshio
> >
> > --
> > devel mailing list
> > devel at lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/devel
> >
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/devel/attachments/20111020/685c6e76/attachment.html