Yubico / yubico-pam

Yubico Pluggable Authentication Module (PAM)
https://developers.yubico.com/yubico-pam
BSD 2-Clause "Simplified" License
690 stars 114 forks source link

Problem parsing OTP?? #227

Closed Woutch closed 3 years ago

Woutch commented 3 years ago

Dears,

I just installed yubico-pam on Centos 7. But I'm having trouble getting it to log in. From what I can see, it doesn't parste the OTC correctly. Does anyone have an idea what could be wrong?

This is the login promt: Using username "root". Keyboard-interactive authentication prompts from server: | YubiKey for `root':

It looks ok to me. And this is the Debug for the PAM Module:

debug: pam_yubico.c:1034 (pam_sm_authenticate): Tokens found for user debug: pam_yubico.c:1096 (pam_sm_authenticate): conv returned 44 bytes debug: pam_yubico.c:1111 (pam_sm_authenticate): Skipping first 0 bytes. Length is 44, token_id set to 12 and token OTP always 32. debug: pam_yubico.c:1118 (pam_sm_authenticate): OTP: INCORRECT INCORRECT INCORRECT I ID: INCORREC debug: pam_yubico.c:157 (authorize_user_token): Using system-wide auth_file /etc/ssh/authorized_yubikeys

It seems unable to extract the token_id and OTP from the login. I verified my ubikey to be legit and it is working with our php Laravel plugin for 2fa.

Best regards, Wouter