Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication
Radius is a great standard. It is powerful enough to accomplish a great deal and simple enough to be easy to handle. Freeradius
is an excellent, open source radius server that ships with many Linux
variants. It is well documented and well supported. The WiKID Strong
Authentication server is a commercial/open source two-factor
authentication system that uses public key encryption to transmit PINs
and one-time passcodes securely to software tokens running on
Blackberries, cell phones, Palms, PocketPCs or, using the J2SE client,
Linux, Macs and Windows PCs. You can think of WiKID like certificates,
but without the hassles of white lists/black lists and more secure –
because the PIN is validated on the server preventing offline
brute-force attacks.