Our great sponsors
-
CyberChef
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
-
SurveyJS
Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
okay, I was able to lab this out since I have Yubikey laying around and FreeIPA and also another person brought up the idea of using Yubikey as well. Long story short it works. Here's what I did: 1. I use the Yubikey Personalization Tool to encode my Yubikey Slot2. GOTCHA: The tool shows you the "Secret Key (20 bytes Hex)" but FreeIPA will not take hex value so you need to convert it to BASE32. I use cyberchef to do this but you can use whatever tool you choose. The hex value is 40 digit long and the BASE32 is 33 digit long. On cyberchef I paste the hex value on the "INPUT" and select "from hex" then it will spit it out in the "OUTPUT" section. The value will look weird but I take that value and move it to "INPUT" and then I select "To Base32". If you havent use cyberchef then it will be hard to understand but you will figure it out in about 30 minutes. https://gchq.github.io/CyberChef/ 2. Once I convert the HOTP secret from hex value > to original value > to Base32 I upload it to FreeIPA. I wish I can show screenshot here but on the "Add OTP Token" there is a block for "Key" that is where you paste the BASE32 value. 3. I tested by SSH into my Cisco IOS-XE device which is connected to FreeIPA through FreeRadius integration and it works.