Re: A (not) new security idea

[Kevin Old]

On Thu, 14 Oct 2004 04:46:43 +0100, Jude  wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wednesday 13 October 2004 20:36, Brian Fahrlander wrote:
> > Keyfobs.  These little USB droplets of cyberspace.  How about we, as
> >
> > one of the largest collections of Linux people out there, standardize
> > some software to fit into PAM to do this:
> > 1. Upon insertion, ask for the passphrase a'la local-agent.
> >
> > 2. When validated, use these credentials for everything.
> >
> > Sounds like a simple idea, but for some reason the powers that be
> >
> > can't seem to 'get off the pot' and placate hundreds of vendors to
> > define a standard.  Standards are what we're about.  Let's make our
> > own.
>
> As a starting point, you might want to look at pam_usb, "a PAM module that
> enables authentication using a USB storage device through DSA
> private/public keys."
>
> http://freshmeat.net/projects/pam_usb/

Sorry to be late on this thread, but I'm interested in using pam_usb
with FC 2 and 3 and was wondering if anyone has it working?  The
Quickstart documentation seems pretty straight forward, but I'm a
little reluctant to try it as I've never done anything with PAM
before.

Can anyone offer any advice on using pam_usb?

Thanks,
Kevin