Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to use two factor auth for my vpn users. You know, the secureid kind of thing where they have a changing number from a keyfob to enter.

I got the free demo kit from secureid and... scary looking! It looked really involved to set up and evaluate.

I am hoping (dreaming?) of a really simple server that can act as a RADIUS server or such (so my juniper screenOS box can use it), that installs in a few minutes and is easy to test.

Does such exist?

Thank you for any thoughts on the subject!

P.S. I see the thread: http://serverfault.com/questions/23284/alternatives-to-rsa-securid which is great.

If this thread could focus on ease of install and set up that would be great. thanks!

share|improve this question

closed as off-topic by Magellan, Tim Brigham, squillman, kce, Ward Oct 17 '13 at 4:27

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Magellan, Tim Brigham, squillman, kce, Ward
If this question can be reworded to fit the rules in the help center, please edit the question.

4 Answers 4

I can't really offer you a suggestion for an easy to use two factor ID tool, but I can confirm that RSA's SecurID is non-trivial. It has the feel of a legacy application, with an interface and architecture that is not at all intuitive.

Having setup and maintained RSA's ACE Server/Authentication Manager before, I would definitely investigate alternatives very thoroughly before I would set it up again.

share|improve this answer

Yubikey? I haven't tried to install it in conjunction with a RADIUS server, but the token is much easier on end user.

There are some instructions here: http://code.google.com/p/yubico-pam/wiki/YubikeyAndRadiusViaPAM

share|improve this answer

Mobile-OTP + FreeRADIUS or XTRadius. easy and free clients and servers.

share|improve this answer

Check out challenge/response token systems like Alladin/SecureComputing Safeword. Very easy to setup. I believe there are a couple of similar solutions out there, but I cannot recall the vendors at the moment.

share|improve this answer
    
any chance you can recall the others? I am really looking to understand the landscape... –  samsmith Jan 3 '10 at 16:30

Not the answer you're looking for? Browse other questions tagged or ask your own question.