<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 24/06/11 12:22, Robert McKay wrote:
<blockquote
cite="mid:BANLkTi=9JPZ2XL5B2LnfL-md-oYtE+Q=CQ@mail.gmail.com"
type="cite">
<pre wrap="">On Fri, Jun 24, 2011 at 10:25 AM, Richard W.M. Jones <a class="moz-txt-link-rfc2396E" href="mailto:rich@annexia.org"><rich@annexia.org></a>wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Thu, Jun 23, 2011 at 11:54:42PM +0100, Progga wrote:
</pre>
<blockquote type="cite">
<pre wrap="">the manufacturer Yubico is claiming [4] that "The YubiKeys are also used
by Fedora’s core team members for securing access to high security
hosts.". Now my question is, does any one have any experience with
these on a Linux machine?
</pre>
</blockquote>
<pre wrap="">
Yes. I can access my Fedora account using a Yubikey, from any machine
(Linux or otherwise) that has a USB port.
It doesn't require "Linux support" as such. The Yubikey acts as a USB
keyboard and sends key strokes for the OTP when you press the button.
</pre>
</blockquote>
<pre wrap="">
Isn't it rather inconvenient having to connect it to a usb port every time
you want to log in? Do you have to disconnect the existing keyboard as well?
Or do all keyboards just automatically get used at once?
Rob
</pre>
</blockquote>
<br>
They all work together so there's no need to disconnect anything,
unless you're out of ports. I leave 2 of these (permanently
connected to my monitor with USB extension leads) in static password
mode for my main machine and backup machine so I never have to type
my 32 character admin passwords. Obviously that's not that good an
idea in an office environment but if physical security isn't an
issue it's a huge timesaver. Also, naturally, the static password
mode leaves you vulnerable to keylogging but that's what the OTP
mode is for.<br>
<br>
The only physical problem I've had with them is that sometimes they
enter the password too fast for machines under heavy loads and a few
characters are skipped, you can reduce the speed of input with the
"personalization tool" though, happily available for Win32, MacOSX
and Linux.<br>
<br>
Roger<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<blockquote
cite="mid:BANLkTi=9JPZ2XL5B2LnfL-md-oYtE+Q=CQ@mail.gmail.com"
type="cite">
<pre wrap=""></pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
--
Gllug mailing list - <a class="moz-txt-link-abbreviated" href="mailto:Gllug@gllug.org.uk">Gllug@gllug.org.uk</a>
<a class="moz-txt-link-freetext" href="http://lists.gllug.org.uk/mailman/listinfo/gllug">http://lists.gllug.org.uk/mailman/listinfo/gllug</a>
</pre>
</blockquote>
<br>
</body>
</html>