OpenSSH + RADIUS/RSA SecurID

My ultimate goal is to have SSH connections (to be used for tunneling into our network) be validated off our RSA ACE/Server. Does anyone have experience in doing this?

I see two different routes:

Either make OpenSSH SecurID aware and authenticate against the ACE/Server, or
Make OpenSSH RADIUS aware and authenticate vs. the ACE/Server RADIUS server.

Making OpenSSH RADIUS aware seems like it would be the most supported step. Is anyone aware of documentation on making this happen?

Any suggestions would be much appreciated. I'm running FreeBSD, by the way, so whether or not I could run the Linux ACE/Host software is unknown to me...

Thanks,
Jeremy Campbell Received on Fri Apr 18 17:24:52 2003