RSA SecurID for POWER8 agent on RHEL

[SimonPerez]

Hi,

Any plans for RSA SecurID for POWER8 (PPC64) agent on RHEL (LE or BE)?

Kind regards,

[JayGuillette]

Auth Manager protects servers based on OS, so customers typically put our PAM agent on RHEL or SUSE Linux and protect SSH.  If you are asking about Debian, then no, our agent does not support Debian Linux and I do not believe it is on our roadmap.

[SimonPerez]

Hi,

Thank you for your quick response. However, I fail to see the answer I'm looking for.

More specifically, based on this:RSA SecurID Authentication Agent for PAM Technical Specifications, the closest support claim is AIX on POWER6. I'm looking for a similar claim for RHEL on POWER8.

In other words, are there existing binaries or sources compilable for PPC64?

Kind regards,

[SimonPerez]

This question still goes unanswered. I don't mind being told that it's not supported at all, as long as someone reassures me that it really is the case. This is a requirement for a RHEL on POWER POC that I'm trying to push at a customer. No SecurID agent for RHEL 7 on POWER 8 means no POC and no further SecurID on POWER project.

[JayGuillette · Accepted solution]

Sorry for the delay, It is not supported because RSA has not tested it.  But whether or not it works is another question, as is the question if it will be supported at some point.  Unfortunately that's a question for the Product Management, which you would have to pursue through your Sales contact.

[SimonPerez]

Thank you Jay. I do understand the difference between "supported" and "practical" and I should have known better to specifically ask for the feasability of it.

That being said, my last question "In other words, are there existing binaries or sources compilable for PPC64?" underlies that aspect in that it might not even be possible, unless there is a PPC64 or noarch source or binary package available. Which there doesn't seem to be the case at this point and time.

As for futur support, I'll take on your advice and bring it up to the sales people.

Kind regards.

[JayGuillette]

Being a support guy and not a build guy, I don't know enough to answer your question about the binaries, but the fact that you asked could indicate this is not going to work.  We have some wiggle room in support, if something is based on the supported version it might work or it might not - classic examples were PAM agent on CentOS works fine because of the supported RHEL binaries, but back in the AM 7.1 days when you could install Authentication Manager as software on Linux the RHEL version of AM 'might' install on CentOS, but that ended up being the beginning of your problems, not the end.

[LukaKodric]

This won't work. PAM agent for RHEL is compiled only for x86 cpu... while RHEL on POWER8 is compiled for PowerPC arch. RSA would need to compile it for PowerPC arch. Open request to product management.

[Kenn_Chong]

Hi there,

At this point in time, we do not have plans to have sources/binaries that are compiled for the PowerPC arch.

[JayGuillette]

Maybe the REST API will work for this, its supported in AM 8.2 SP1