Hi Bryan,

I tested the ACE agent on HP3K


       ACE/Server Client Configuration v 1.3
                    Copyright 1995
         Security Dynamics Technologies, Inc.

configuration file is version 7
The configuration structure is 356 bytes long
The ACE/Server limits are:
 Client retry is 5 times and the Client timeout is 5 seconds
There is no slave configured
DES has been disabled with sdconfig
Duress mode has been disabled by sdconfig
Addresses are configured in.
Number of bad PASSCODEs is 5
This client is xxxxxxxxxxxxxx
This client address is xxxxxxxxxxxxxxx
The Master ACE/Server is xxxxxxxxxxx
The address of the Master ACE/Server is xxxxxxxxxxxx
The service name is securid
acmprotocol = udp
acm_port is xxxxxxxxxxxx


in combination with SecurID cards. Not sure whether this is the same but Radius
is the main process behind running on Unix.

Disadvantage here: one logon USER.ACCOUNT is only allowed for one token/card.
Sessionname based Security like in Sec/3000 is not recognized at all!
So, MANAGER.ACCOUNT logon is only valid for ONE card!

We already raised this issue but currently I see no progress here. Most
probably, HP3000 here
running for DuPont's businesses will stay excluded of the general logon policy
because of this
lack.

Best regards, Andreas Schmidt, CSC, Germany






[log in to unmask] on 06/08/99 09:04:00 PM

Please respond to [log in to unmask]

To:   [log in to unmask]
cc:    (bcc: Andreas Schmidt/GIS/CSC)
Subject:  Radius on MPE/iX



Good afternoon,

Has anyone experimented with implementing a Radius server based
security solution on the 3K?  I am considering implementing Radius to
manage users/passwords on some of our equipment and was wondering if we
could do it with the 3K's too.

Have any of the amazing software porting experts look at Radius yet?
(Mark???)

I'm currently not interested in looking at any of the excellent third
party security solutions available for the 3K.  I'm just looking for
the ability to access a Radius server.

TIA,
Bryan Greenberg
Interstate Brands Corporation
[log in to unmask]