REPOST: Very difficult problem - Implementing SKEY on HPUX 11.xx

[dean licheri_1]

Hi gurus

I dowloaded a copy of skey from the hp porting archive and installed it on my HP workstation. However i dont seem to be able to get it working so that it challenges logon requests after entering user id's. Has anybody set this up? if so is there a PAM module I need to define in /etc/pam.conf? i have been unable to find any info on how to set this up. any help is greatly appreciated. software can be downloaded from the hp ux porting archive at:

http://hpux.cs.utah.edu/hppd/cgi-bin/search?package=on&description=on&term=skey

regards
dean

[Peter Godron · Accepted solution]

Dean,
I have got as far as installing the software into /opt/skey.
The next step was to change the shell int /etc/passwd for the user to /opt/skey/bin/keysh.

to run the keyinit go to /opt/skey/bin and do a ./keyinit userid

For man pages do a vi on the files in /opt/skey/man/man8

I hope you are familiar with how skey works from here on, because I am not, sorry!

If you have the time, please post a little note on how to use the system. Would be useful to later readers.

[dean licheri_1]

Many thanks to Peter Godron. The fix is as follows:

Install SKEY from porting archive (run swinstall on uncompressed depot)

1. run /opt/skey/bin/keyinit
2. replace user shell in /etc/passwd with /opt/skey/bin/keysh
3. ensure that /etc/skeykeys has permissions set to 666 and is owned by root:sys
4. attempt login via telnet or ftp
5. generate key using and diaplayed after unix password is entered and [response] prompt is displayed (to generate key use key command)
6. Enter phrase generated by key command and you should be in!

this is a nice tool if you want an extra layer of securty in place for local or remote users.

dean