<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-15">
</head>
<body>
<div bgcolor="#ffffff" text="#222222" style="font-family: Arial;
font-size: 11pt;">
Hello,<br>
<br>
Like <font color="#595959"><font face="Tahoma, sans-serif"><font
style="font-size: 9pt" size="2"><font size="2"
color="#000000"><font face="Tahoma, sans-serif">ninjab<font
size="2"><font face="Tahoma, sans-serif">ytes <font
size="2"><font face="Tahoma, sans-serif">(<a class="moz-txt-link-freetext" href="http://www.shrubbery.net/pipermail/tac_plus/2007-June/000097.html">http://www.shrubbery.net/pipermail/tac_plus/2007-June/000097.html</a>),</font></font></font></font></font></font></font></font></font>
I have some trouble with "tac_plus with S/Key". Unfortunately, the
documentation about "tac_plus and S/Key" isn't really detailed. <br>
<br>
The positive aspect:<br>
tac_plus 4.0.4.26 works correctly (login on a NAS with cleartext
password: Done) and the libskey seems to work as well ("configure
[...] --with-skey" and the following "make" without error and the
config snippet "login = skey" was accepted while starting
tac_plus). <br>
<br>
I use the following config<br>
<br>
user = fred {<br>
default service = permit<br>
login = skey<br>
enable = skey<br>
}<br>
<br>
My question is now: <br>
When I try to login as "fred" on my NAS, I see the message "Cannot
generate skey prompt for fred" in the tac_plus log file. In my
opinion, it's no wonder that this doesn't work because there is no
password configued for the user "fred" - and a skey challenge is
build on a sequence_no, seed and the users password, right? The
user itself can then calculate the response with the challenge
string and its password. <br>
<br>
So: Where can I enter the user's password for an skey
authentication in the tac_plus.conf?<br>
<br>
Thanks in advance for your help,<br>
<br>
Best regards,<br>
<br>
Patrick Albert<br>
<br>
<div class="moz-signature">-- <br>
<p><font face="Tahoma, sans-serif"><font style="font-size: 9pt"
size="2">
Patrick Albert<br>
__________________<br>
<b>GIP Exyr GmbH</b><br>
Hechtsheimer Str. 35-37 | 55131 Mainz</font></font> </p>
<p><font color="#595959"><font face="Tahoma, sans-serif"><font
style="font-size: 9pt" size="2">
Tel: +49 (0) 6131 / 80124 - 27 | Fax: +49 (0) 6131 /
80124 - 24<br>
E-Mail: <a href="mailto:patrick.albert@gip.com"
class="external text"
title="mailto:patrick.albert@gip.com" rel="nofollow">patrick.albert@gip.com</a>
| Web: <a href="http://www.gip.com/" class="external
text" title="http://www.gip.com/" rel="nofollow">www.gip.com</a></font></font></font>
</p>
<p><font color="#595959"><font face="Tahoma, sans-serif"><font
style="font-size: 9pt" size="2">
Geschäftsführer: Dr. Bernd Reifenhäuser, Dr. Alexander
Ebbes<br>
Handelsregister: HRB 6870 - Amtsgericht Main<font
size="2"><font face="Tahoma, sans-serif">z</font></font><br>
</font></font></font></p>
<font color="#595959"><font face="Tahoma, sans-serif"><font
style="font-size: 9pt" size="2"><font size="2"
color="#000000"><font face="Tahoma, sans-serif"><font
size="2"><font face="Tahoma, sans-serif"><font
size="2"><font face="Tahoma, sans-serif"></font></font></font></font></font></font></font></font></font>
</div>
</div>
</body>
</html>