Yubico Forum ...visit our web-store at 2010-01-14T16:59:46+01:00 https://forum.yubico.com/feed.php?f=5&t=453 2010-01-14T16:59:46+01:00 2010-01-14T16:59:46+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1971#p1971 <![CDATA[Re: PAM error]]>
I also had to

chmod g+rw /etc/yubikey

chmod g+s /sbin/yk_chkpwd


Thanks,
Koneko

Statistics: Posted by Koneko — Thu Jan 14, 2010 4:59 pm

]]> 2010-01-14T09:59:58+01:00 2010-01-14T09:59:58+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1970#p1970 <![CDATA[Re: PAM error]]>
We would appreciate if you can make a correct user name and YubiKey ID mapping in the mapping file as follows and try again:

<user name>:<YubiKey ID (First 12 characters of the YubiKey OTP)>

We hope this helps!

Statistics: Posted by network-marvels — Thu Jan 14, 2010 9:59 am

]]> 2010-01-13T16:18:50+01:00 2010-01-13T16:18:50+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1969#p1969 <![CDATA[Re: PAM error]]>
[pam_yubico.c:pam_sm_authenticate(537)] ykclient return value (0): Success
[pam_yubico.c:check_user_token(117)] Authorization line: YKDB
[pam_yubico.c:pam_sm_authenticate(564)] Yubikey not authorized to login as user
[pam_yubico.c:pam_sm_authenticate(579)] done. [Authentication service cannot retrieve authentication info]

Statistics: Posted by Koneko — Wed Jan 13, 2010 4:18 pm

]]> 2010-01-13T11:33:59+01:00 2010-01-13T11:33:59+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1965#p1965 <![CDATA[Re: PAM error]]>
http://www.yubico.com/developers/api/

As you did not mention the API Key parameter with the Yubico PAM module in the PAM configuration file, you were receiving the BAD_SIGNATURE error.

We would appreciate if you can follow the steps listed below and try again:

    1) Create your own Client ID and API Key pair using the following link:

    https://api.yubico.com/get-api-key/

    Enter your email address and YubiKey OTP and click on "Generate API Key". This will generate a new client ID and API Key for you.

    2) In the PAM configuration file, mention the ID and the API Key with the Yubico PAM module as follows:

    auth sufficient pam_yubico.so id=<Your Client id> key=<Your API Key> authfile=/etc/yubikey debug

    For example:

    auth sufficient pam_yubico.so id=3476 key=WHvkp47s6INISPMIIzKNkYDip39I= authfile=/etc/yubikey debug


We hope this helps!

Feel free to write back in case you face any problems or have further queries.

Statistics: Posted by network-marvels — Wed Jan 13, 2010 11:33 am

]]> 2010-01-12T15:20:15+01:00 2010-01-12T15:20:15+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1961#p1961 <![CDATA[Re: PAM error]]>
We are looking into this and we will update you soon.

Statistics: Posted by network-marvels — Tue Jan 12, 2010 3:20 pm

]]> 2010-01-11T17:38:23+01:00 2010-01-11T17:38:23+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1953#p1953 <![CDATA[Re: PAM error]]> 2. PAM version 2.2
3. Sudo version 1.6.9p17
4.

#%PAM-1.0
auth sufficient /lib/security/pam_yubico.so id=(my id) authfile=/etc/yubikey debug
auth include system-auth
account include system-auth
password include system-auth
session optional pam_keyinit.so revoke
session required pam_limits.so

5. I did not install a validation server.

Thanks =)

Statistics: Posted by Koneko — Mon Jan 11, 2010 5:38 pm

]]> 2010-01-11T14:19:15+01:00 2010-01-11T14:19:15+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1952#p1952 <![CDATA[Re: PAM error]]>
    1) Details of Operating System (OS name, Kernel Version etc.) where you are configuring the Yubico PAM module
    2) Version of the Yubico PAM module you are trying to configure
    3) The Application details (Version number etc) for which you are configuring the Yubico PAM module
    4) The PAM configuration file of the application (situated in /etc/pam.d directory)
    5) Did you install your own OTP validation server and using it for validating the YubiKey OTP or are you using the online Yubico OTP validation server?

This information will help us debugging the issue you are facing.

Statistics: Posted by network-marvels — Mon Jan 11, 2010 2:19 pm

]]> 2010-01-08T18:22:51+01:00 2010-01-08T18:22:51+01:00 https://forum.yubico.com/viewtopic.php?t=453&p=1949#p1949 <![CDATA[PAM error]]>
viewtopic.php?f=5&t=174

and I am receiving the following error in the debug output:

pam_yubico.c:pam_sm_authenticate(537)] ykclient return value (3): Request signature was invalid (BAD_SIGNATURE)
[pam_yubico.c:pam_sm_authenticate(579)] done. [Authentication service cannot retrieve authentication info]

Does anyone know a fix for this?

Thanks,
Koneko

Statistics: Posted by Koneko — Fri Jan 08, 2010 6:22 pm

]]>