Comment 8 for bug 474698

Revision history for this message
Russell Lewis (russlewi) wrote :

That's the "beauty" of the DES card. You cannot know the next password. (Obviously there is some algorithm to determine it that the VPN server and card know, but the idea is that it should not be reverse-engineer-able.) I punch in a PIN # and it spits out a password. 3 wrong PIN numbers and it locks down...

They do make a "soft token" that is essentially a software version of this card. However, the problem with a soft token (which only has Windoze and OSX clients) is that you can only login from your soft token machine. I log in from various computers (desktop, laptop, lab workstation), so the physical card is the only way to keep the correct state.

As long as I have the option to not save the user password (which networkmanagement does) and if it prompts me for that password (which it does not) I'll be able to use this.