RSA SecurID and CentOS5

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



I am attempting to get our RSA SecurID tokens working in CentOS:

http://www.rsa.com/node.aspx?id=1177

Has anyone had any experience with this? I know CentOS is not supported but one would think that it could be easily implemented...

Here's the error I'm receiving:

May 13 10:26:21 sshd[1662]: @(#)RSA Authentication Agent 5.3 for PAM [263]
May 13 10:26:21 sshd[1662]: Entered pam_sm_authenticate
May 13 10:26:21 sshd[1662]: Entered iReadPAMConfigFile
May 13 10:26:21 sshd[1662]: VAR_ACE is /var/ace
May 13 10:26:21 sshd[1662]: ENABLE_GROUP_SUPPORT is 0
May 13 10:26:21 sshd[1662]: INCL_EXCL_GROUPS is 0
May 13 10:26:21 sshd[1662]: Adding ::other:: to list of groups
May 13 10:26:21 sshd[1662]: Adding ::wheel:: to list of groups
May 13 10:26:21 sshd[1662]: Adding ::eng:: to list of groups
May 13 10:26:21 sshd[1662]: Adding ::othergroupnames:: to list of groups
May 13 10:25:21 sshd[1662]: Adding ::testing:: to list of groups
May 13 10:26:21 sshd[1662]: Number of groups is 4
May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_USERNAME_STR
May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_RESERVE_REQUEST_STR
May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_PASSCODE_STR
May 13 10:26:21 sshd[1662]: AUTH_CHALLENGE_PASSWORD_STR
May 13 10:26:21 sshd[1662]: iReadPAMConfigFile: Returning success.
May 13 10:26:21 sshd[1662]: Entered PAM:InitSecurID
May 13 10:26:21 sshd[1662]: ace_dir_env is VAR_ACE=/var/ace
May 13 10:26:21 sshd[1662]: AceInitialize failed
May 13 10:26:21 sshd[1662]: Reserve password not allowed by RSA SecurID module
May 13 10:26:21 sshd[1662]: Failed password for apace from 192.168.5.201 port 60353 ssh2

[root@snorlax bin]# ./acestatus

Error can't connect to ACE/Server

[root@snorlax bin]# ./acetest

AceInitialize failed
[root@snorlax bin]#

RSA is no help since it's not a RHEL box :( The PAM module installs fine, but I see no communication between the server and the RSA Appliance!
--
Andy Pace
apace@xxxxxxxxxxxxx
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux