The Suretec Blog

My Yubikey arrived yesterday and I was keen to check out the apps already enabled for it, but it was better just using Google.



A search for Yubikey Drupal found the Drupal Yubikey plugin. So I dropped that into one of the main Suretec websites, got my Yubico API Key for the plugin config and now I can log in with a password plus the key (or just the one-time-password from teh Yubikey is I so desire)!

I love the usb keyboard that just pastes the OTP key into whereever your cursor is. But what happens if you loose your key and vital services are enabled with Yubikey I wonder?

Gavin.

It's taken us a while to get round to ordering one of these Yubikeys from Yubico, but they do look great and have lots of documentation via the wiki.

We're going to be testing them via the pam module for SSH access (and of course using pam_ldap).

So, users in LDAP^[?] via pam, and a Yubikey, let's see how it goes!

(will be interesting for logging in a SIP handset via Asterisk or FreeSWITCH that needs one too and all the others technologies Suretec use and support (Catalyst, Perl, PostgresSQL, Squid and more....). We'll see....