Christina,

We cannot use OpenSSH because our policies forbid us to use open source
software with no support contract.

Anyway, we got it to work by specifying keyboard interactive in the
/etc/ssh/sshd_config file. Now it works flawlessly. For some reason, RSA is
unaware of this fix.

Thanks to all for their input, especially Reg Quinton and Asif Iqbal! Both
of you pointed us in the right direction.

_______________________________

Edward Reiss <ed.reiss (at) convdata (dot) com [email concealed]>
Cell
631.681.7181
Landline
518.533.9764
Fax
631.881.5545
Quis custodiet ipsos custodes?

_______________________________

-----Original Message-----
From: Christian Lete Viesca [mailto:clete (at) itconvergence (dot) com [email concealed]]
Sent: Monday, August 06, 2007 12:41 PM
To: Edward Reiss; focus-sun (at) securityfocus (dot) com [email concealed]
Subject: RE: SSHD with Secured authentication, using RSA PAM client

Hi Edward,

I have deployed Openssh aling with SecurID, Id recommend you to get openssh
from sunfreeware, its very simple and straightforward to do it that way, is
there a particula reason you are sticking to Solaris' ssh?

Cheers,

Christian Lete Viesca

UNIX/Jboss Administrator- IT Convergence Support Services

IT Convergence

Toll-free USA: [1] (800) 675-0032 Ext. 2652

International: [1] (415) 675-7935 Ext. 2652

Argentina: [54 11] 4000-8400 or 0800-122-4821 Ext. 2652

México: 01-800-777-0051 Ext. 2652

Shanghai: [86] (21) 6279-8030 Ext. 2652

Cell Phone: [54 911] 62014732

Email: clete (at) itconvergence (dot) com [email concealed]

Website: http://www.itconvergence.com

Confidentiality Notice

The information transmitted in this email is intended only for the person or
entity to which it is addressed and may contain confidential and/or
privileged material from IT Convergence. Any review, retransmission,
dissemination or other use of the information contained in this email by
persons or entities other than the intended recipient is prohibited. If you
are not the intended recipient, you are not authorized to forward or
otherwise distribute this e-mail.

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
Behalf Of Edward Reiss
Sent: Tuesday, July 31, 2007 7:20 PM
To: focus-sun (at) securityfocus (dot) com [email concealed]
Subject: SSHD with Secured authentication, using RSA PAM client

Greetings,

Has anyone got ssh to authenticate to SecureID? We have to use the version
of sshd included with Solaris 9, 1.0.1, and we cannot get it to work. It
seems Solaris always tries to authenticate locally even after I configure
pam.conf. RSA has a "work around" but they do not support even the work
around. RSA will support OpenSSH, but not the sshd included with Solaris.

Any help would be appreciated.

_______________________________

Edward Reiss <ed.reiss (at) convdata (dot) com [email concealed]>
Cell
631.681.7181
Landline
518.533.9764
Fax
631.881.5545
Quis custodiet ipsos custodes?

_______________________________

[ reply ]