Re: USB key requirement.

2011-01-16 Thread deloptes
Dan Serban wrote: > On Wed, 12 Jan 2011 04:46:41 -0800 (PST) > Emanoil Kotsev wrote: > >> >> >> --- On Tue, 1/11/11, Dan Serban wrote: >> >> >> > >> > I figured that after the root partition is mounted (nfs), I >> > would have >> > an init.d script that would work its magic.. if it's there

Re: USB key requirement.

2011-01-13 Thread Dan Serban
On Wed, 12 Jan 2011 04:46:41 -0800 (PST) Emanoil Kotsev wrote: > > > --- On Tue, 1/11/11, Dan Serban wrote: > > > > > > I figured that after the root partition is mounted (nfs), I > > would have > > an init.d script that would work its magic.. if it's there, > > allow the > > continuation o

Re: USB key requirement.

2011-01-12 Thread deloptes
Stefan Monnier wrote: > Real smartcards probably don't work the way I described, but I hope it > gives you some idea of how a smartcard can be different from a plain USB > mass storage holding a secret key. smart card is really different, but the idea is the same - implemented in the dongles, onl

Re: USB key requirement.

2011-01-12 Thread Emanoil Kotsev
--- On Tue, 1/11/11, Dan Serban wrote: > > I figured that after the root partition is mounted (nfs), I > would have > an init.d script that would work its magic.. if it's there, > allow the > continuation of the boot sequence (load gdm and other > non-essential > services).  All I would requi

Re: USB key requirement.

2011-01-11 Thread Stefan Monnier
>> The eToken is basically a smartcard that plugs into USB. > I still don't really understand the difference apart from it containing > a key that I match against. Which is in essence what I was asking to > do with a USB block device which looks much cheaper than the eToken. Typically, the differ

Re: USB key requirement.

2011-01-11 Thread Dan Serban
On Tue, 11 Jan 2011 22:52:06 +0100 deloptes wrote: > > > > > My case is different in the sense that I'm not decrypting my block > > volumes, just halting a boot sequence. > > > > There is something wrong with the setup of your case. > > If you are doing a diskless boot from a share ... how c

Re: USB key requirement.

2011-01-11 Thread deloptes
> > My case is different in the sense that I'm not decrypting my block > volumes, just halting a boot sequence. > There is something wrong with the setup of your case. If you are doing a diskless boot from a share ... how could you use a device (usb or something else) to authenticate before th

Re: USB key requirement.

2011-01-10 Thread Dan Serban
On Mon, 10 Jan 2011 13:45:29 + Darac Marjal wrote: > On Sun, Jan 09, 2011 at 09:42:03PM -0800, Dan Serban wrote: > > So, I'm currently switching my 9 workstations around the house to > > diskless boot. They mount nfs shares that reside on top of an > > encrypted raid server. This is all fin

Re: USB key requirement.

2011-01-10 Thread Dan Serban
On Mon, 10 Jan 2011 14:07:31 -0600 Hugo Vanwoerkom wrote: > Dan Serban wrote: > > So, I'm currently switching my 9 workstations around the house to > > diskless boot. They mount nfs shares that reside on top of an > > encrypted raid server. This is all fine and good. > > What is a workstation

Re: USB key requirement.

2011-01-10 Thread Dan Serban
On Mon, 10 Jan 2011 11:46:04 +0200 Andrei Popescu wrote: > On Du, 09 ian 11, 21:42:03, Dan Serban wrote: > > So, I'm currently switching my 9 workstations around the house to > > diskless boot. They mount nfs shares that reside on top of an > > encrypted raid server. This is all fine and good.

Re: USB key requirement.

2011-01-10 Thread Hugo Vanwoerkom
Dan Serban wrote: So, I'm currently switching my 9 workstations around the house to diskless boot. They mount nfs shares that reside on top of an encrypted raid server. This is all fine and good. What is a workstation like? Hugo What I'd like to do: On a specific workstation, on boot, i

Re: USB key requirement.

2011-01-10 Thread Andrei Popescu
On Du, 09 ian 11, 21:42:03, Dan Serban wrote: > So, I'm currently switching my 9 workstations around the house to > diskless boot. They mount nfs shares that reside on top of an > encrypted raid server. This is all fine and good. > > What I'd like to do: > > On a specific workstation, on boot,