search

h0ng10 / yubico-yubiserve

Automatically exported from code.google.com/p/yubico-yubiserve
GNU General Public License v3.0
0 stars 0 forks source link

Problems with authentication using drupal-yubikey #1

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Set up http://code.google.com/p/yubico-yubiserve/
2. Set up drupal with http://code.google.com/p/yubikey-drupal/
3. Try to add your own key to yubikeys in drupal.

What is the expected output? What do you see instead?
Expecting to see the youbikey added (it does with yubico's servers), instead 
getting "YubiKey OTP validation failed with message: NO_VALID_ANSWER"
tcpdump shows that the key was accepted by yubico-yubiserve:
tcpflow -r /tmp/yubi.pcap -c 
192.168.122.049.33032-192.168.122.047.08000: GET 
/wsapi/2.0/verify?id=1&nonce=a27fcf6daf2d50ed02d21ae56da5ffee&otp=cccccccbkkcgcr
gjccrenkdcudgtunljkfkjkbbufbug&timeout=10&h=VR2HaPARxqwHklrAmRPYAGHIg9E= 
HTTP/1.1
User-Agent: PEAR Auth_Yubico
Host: 192.168.122.47:8000
Accept: */*

192.168.122.047.08000-192.168.122.049.33032: HTTP/1.0 200 OK

192.168.122.047.08000-192.168.122.049.33032: Server: Yubiserve/1.0 Python/2.6.6
Date: Fri, 03 Dec 2010 08:41:34 GMT
Content-type: text/plain

otp=cccccccbkkcgcrgjccrenkdcudgtunljkfkjkbbufbug
status=OK
t=2010-12-03T09:41:34
h=r0e+lynY/Dzetl5rYiWU6Orw9HM=

What version of the product are you using? On what operating system?
Most recent on OpenBSD-current on i386 in qemu-kvm.

Please provide any additional information below.

Original issue reported on code.google.com by vic...@gmail.com on 3 Dec 2010 at 8:43

GoogleCodeExporter commented 8 years ago 
You're right: some optional parameters were expected, so it doesn't work. A fix 
will be released very soon (i hope within the day).

Regards,
Alessio Periloso

Original comment by b1ga...@gmail.com on 3 Dec 2010 at 10:21

GoogleCodeExporter commented 8 years ago 
This issue was closed by revision r15.

Original comment by b1ga...@gmail.com on 3 Dec 2010 at 10:50

GoogleCodeExporter commented 8 years ago 
It should be fixed, let me know if the problem is still there.

Original comment by b1ga...@gmail.com on 3 Dec 2010 at 11:04

GoogleCodeExporter commented 8 years ago 
Still getting same answer from drupal-yubikey, this time the traffic is as 
follows:

192.168.122.049.02344-192.168.122.047.08000: GET 
/wsapi/2.0/verify?id=1&nonce=d3b1a11a47c2d631d8d9781ae879aab7&otp=cccccccbkkcghn
njcerjfrrklelejegurlledhccutce&timeout=10&h=ZrJqf0S/qnQ6haBDzasvv1YGUuQ= 
HTTP/1.1
User-Agent: PEAR Auth_Yubico
Host: 192.168.122.47:8000
Accept: */*

192.168.122.047.08000-192.168.122.049.02344: HTTP/1.0 200 OK

192.168.122.047.08000-192.168.122.049.02344: Server: Yubiserve/2.0 Python/2.6.6
Date: Fri, 03 Dec 2010 11:13:23 GMT
Content-type: text/plain

h=2Vb6yqWYNn3n3H8fM54voaDbaV4=
t=2010-12-03T12:13:23
otp=cccccccbkkcghnnjcerjfrrklelejegurlledhccutce
nonce=d3b1a11a47c2d631d8d9781ae879aab7
sl=100
status=OK

Original comment by vic...@gmail.com on 3 Dec 2010 at 11:14

GoogleCodeExporter commented 8 years ago 
[deleted comment]
GoogleCodeExporter commented 8 years ago 
I think it's okay now. I've tested the new server (v. 2.0.2) against Yubico 
class, and it seems to be working now. Let me know if it works for you too.

Regards,
Alessio Periloso

Original comment by b1ga...@gmail.com on 3 Dec 2010 at 12:52

GoogleCodeExporter commented 8 years ago 
svn up and it works now, thank you.

Original comment by vic...@gmail.com on 3 Dec 2010 at 1:04

GoogleCodeExporter commented 8 years ago 
Hope you like it then ;)

Original comment by b1ga...@gmail.com on 3 Dec 2010 at 1:07

GoogleCodeExporter commented 8 years ago 
I just installed the 6.x-2.0-beta2 version of yubikey-drupal and I'm getting a 
"YubiKey OTP validation failed with message: NO_VALID_ANSWER" when I try to 
utilize my Yubikey.  Any ideas?

Original comment by KF4...@gmail.com on 3 Mar 2011 at 1:54