Hi All,

I have a high secure environment (PCI DSS Level 1 compliant) based on RHEL 5, I am using Apache as front-end for the application layer and of course SSHd to login into the servers.

My question is:
I need to apply a 2 factors auth for both Apache and SSHd, what is the best solution that can be easily integrated with both systems (trough PAM or some apache module) with less costs and headache?
At the moment we are using RSA tokens in other systems but I don't think it's the best solution and anyway isn't cheap (200$ for a soft token on the smartphone is just too much.)

If you need more informations don't hesitate to ask!

Thanks in advance,
Lifeonatrip

I found ActivIdentity's activcard solution pretty simple, with a nicer pricing model. It uses direct radius protocols so no special measures required unlike RSA.

Thanks for the response, I am looking at the website, but practically what are the steps in order to implement the solution?
Buy an appliance or just install the daemon to create the OTPs and integrate it with a client side pam/apache module?

Well the solution I used was a service on windows, very simple for a proper enterprise viable solution. Are you looking for a more open solution though? have a look at wikid http://www.wikidsystems.com/community-version they have android clients for a price too, although I don't really know much about the technical side of the solution they provide to any useful extent.

http://www.e-things.org/go/?p=19 would also be a good example of a extremely simple solution that might work for you.

1 members found this post helpful.