IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New RSA keyfobs 2003 DC.
Is there a way that we can set up our Ace Server in concert with a Winders 2003 domain so that you have to use the little number generating keyfob when you are outside the lan (through an SSL/VPN) but can use your username/password combination when you are connecting directly from the lan?

Basically 2 factor auth from outside the lan, user/pwd from inside?
bcnu,
Mikem

Eine Leute. Eine Welt. Ein F\ufffdhrer.
God Bless America.
New Questions
Would it be possible to set up a 2nd account, prefixed by, say, "R-" to indicate remote access and then use the keyfob? And limit the normal access to a normal sub-net?

If the account password cannot be set up as you asked, maybe this may work.

IOW - I don't have a clue.
A good friend will come and bail you out of jail ... but, a true friend will be sitting next to you saying, "Damn...that was fun!"
New I thought of that.
But I'd really rather not do that - if it's possible. I've got one of my kids talking to RSA about it right now. Thanks for the input.
bcnu,
Mikem

Eine Leute. Eine Welt. Ein F\ufffdhrer.
God Bless America.
New thats what we do at work, will ask the guys how its done
All tribal myths are true, for a given value of "true" Terry Pratchett

Any opinions expressed by me are mine alone, posted from my home computer, on my own time as a free american and do not reflect the opinions of any person or company that I have had professional relations with in the past 48 years. meep
questions, help? [link|mailto:pappas@catholic.org|email pappas at catholic.org]
New Great! Thanks! Eagerly awaiting :-)
bcnu,
Mikem

Eine Leute. Eine Welt. Ein F\ufffdhrer.
God Bless America.
New sorry I was confused
we use vpn to corporate then fob access to the labs only, not integrated.
Question, can you not throw a radius server in between the domain and the outside so that inside the authenticate with normal id and when remote, the radius server would use the normal tokens to pass thru to the windows domain?
sorry
daemon
may you go in beauty
New That's what we're doing.
I've got my kids working on it. Thanks.
bcnu,
Mikem

Eine Leute. Eine Welt. Ein F\ufffdhrer.
God Bless America.
     RSA keyfobs 2003 DC. - (mmoffitt) - (6)
         Questions - (jbrabeck) - (1)
             I thought of that. - (mmoffitt)
         thats what we do at work, will ask the guys how its done -NT - (boxley) - (3)
             Great! Thanks! Eagerly awaiting :-) -NT - (mmoffitt) - (2)
                 sorry I was confused - (daemon) - (1)
                     That's what we're doing. - (mmoffitt)

Too hard to follow.
102 ms