My boss dropped by and asked me if it would be possible to have our OpenLDAP servers (2.4) which are currently using the {SASL} password form to authenticate against saslauthd which goes to Kerberos be configured (on a per entry basis) to authenticate against the YubiKey or Kerberos.
Has anyone set up an OpenLDAP server to authenticate against YubiKey? Or hooked YubiKey's authenication into SASL? (google hasn't found anything for me yet)
Thanks,