From owner-freebsd-questions  Thu Aug 30  2:40:26 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from deborah.paradise.net.nz (deborah.paradise.net.nz [203.96.152.32])
	by hub.freebsd.org (Postfix) with ESMTP id 03BA437B406
	for <freebsd-questions@freebsd.org>; Thu, 30 Aug 2001 02:40:23 -0700 (PDT)
	(envelope-from marki@paradise.net.nz)
Received: from evileye (203-79-104-158.tnt14.paradise.net.nz [203.79.104.158])
	by deborah.paradise.net.nz (Postfix) with SMTP id 308D41FA026
	for <freebsd-questions@freebsd.org>; Thu, 30 Aug 2001 21:40:17 +1200 (NZST)
Message-ID: <007501c13137$c4395ae0$0101a8c0@evileye>
From: "Mark Ibell" <marki@paradise.net.nz>
To: <freebsd-questions@freebsd.org>
References: <3B8CC9DE.2D5A3B01@paradise.net.nz> <20010829125301.B9807@blossom.cjclark.org>
Subject: Re: Racoon able to replace SecuRemote?
Date: Thu, 30 Aug 2001 21:40:11 +1200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


----- Original Message -----
From: "Crist J. Clark" <cristjc@earthlink.net>
To: "Mark Ibell" <marki@paradise.net.nz>
Cc: <freebsd-questions@FreeBSD.ORG>
Sent: Thursday, August 30, 2001 7:53 AM
Subject: Re: Racoon able to replace SecuRemote?


> On Wed, Aug 29, 2001 at 10:54:22PM +1200, Mark Ibell wrote:
> > Hi,
> >
> > SecuRemote authenticates using a username & password.
>
> Doesn't SecuRemote generally want username, PIN, and the number off of
> your SecurID token?

Not in this particular instance, although I do recall seeing this sort of
setup a while back. I'll check what version of SecuRemote is running,
although I suspect it's < 4.1.

>
> > This scheme
> > doesn't seem to fit into any of Racoon's authentication types, e.g.
> > fqdn, user_fqdn, etc. Is SecuRemote authenticating with a proprietary
> > FW-1 method or something?
>
> SecuRemote uses RSA Security's (was Security Dynamics) proprietary and
> patented tools. Checkpoint's FW-1 knows how to use it.
>
> How is this FreeBSD related? Do you want to use SecurID tokens with
> racoon running on FreeBSD?
> --
> Crist J. Clark                           cjclark@alum.mit.edu
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message