Parent Directory
|
Revision Log
|
Revision Graph
Missing word added.
--------------------------------------------------------------------------------
$Header: /hl/cvsroots/e3ft_gpl01/e3ft_gpl01/nixprojs/cron/2006/php_rsa_auth_20061228/_readme.txt,v 1.3 2006/12/28 22:03:59 dashley Exp $
--------------------------------------------------------------------------------
Notes on this program:
a)I got the RSA software working while drinking lots of coffee and trying many
things. Many months ago. I didn't document it very well.
b)The .c file in this directory works ... but getting it to compile and link
and run is the problem. I've forgotten the exact steps.
c)My installation was confounded by the fact that I have a version of RHEL
newer than RSA supports. This means that I had to hack their install
script to tolerate it, and I also had to install compat libs after the fact.
I don't remember which ones.
d)I do remember that after I got the .c program to run, I had a lot of problems
because I couldn't authenticate using the program but I could authenticate
using the authentication test program from RSA (don't remember the name).
After searching RSA's technical support, I finally traced it to the fact that
each connecting node keeps some kind of a "node secrets" file that has to
be the same as the one the RSA server keeps. I don't remember the file
name. I do remember this:
a)I had to copy the file so there were two copies of it.
b)If the file is deleted (which I did orignally), both the server software
and the library linked to the client will try to recreate it on the fly.
Effectively, you can't try to do without this file or you'll be hosed,
too. You must ensure consistency between the two copies.
Suggestions (to figure out what I did):
a)Set the logging to max detail (forget if this is possible or how I did
it).
b)Search RSA's technical support by the log error message and some
support pages should eventually be found that stress that the files
must be the same.
The recommended installation of the RSA software is that the authentication
manager and the client run on different machines. When they both run on
the same machine (with a socket connection), the same rules apply. That file
(can't remember the name) has to be the same both for the server and the
client.
To all affected, parties, I apologize for my non-existent notes.
If you'd like me to add any info to this stuff on the web, please e-mail
me at DTA@E3FT.COM.
--------------------------------------------------------------------------------
$Log: _readme.txt,v $
Revision 1.3 2006/12/28 22:03:59 dashley
Missing word added.
Revision 1.2 2006/12/28 21:58:18 dashley
Extra lines removed.
Revision 1.1 2006/12/28 21:56:47 dashley
Initial checkin.
--------------------------------------------------------------------------------
| David T. Ashley | ViewVC Help |
| Powered by ViewVC 1.0.5 |