Yubico Forum

Re: Deploying an php validation server

2013-01-31T08:16:09+01:00

No, ykval-queue is only needed if you have several validation servers to keep in sync.

/klas

Statistics: Posted by Klas — Thu Jan 31, 2013 8:16 am

Re: Deploying an php validation server

2013-01-30T20:42:39+01:00

That did it, thanks! And it doesn't appear that ykval-queue is needed...

Statistics: Posted by abatie — Wed Jan 30, 2013 8:42 pm

Re: Deploying an php validation server

2013-01-30T20:36:15+01:00

Do I even need to run ykval-queue?

Statistics: Posted by abatie — Wed Jan 30, 2013 8:36 pm

Re: Deploying an php validation server

2013-01-30T10:59:15+01:00

Almost there.. =)

If you've only got one validation server you want to make sure the config parameter __YKVAL_SYNC_POOL__ is empty and that __YKVAL_SYNC_DEFAULT_LEVEL__ is 0.
What's happening is that your validation server tries to sync with another server and fails. As default sync level is measure in percent it doesn't get up to required level of syncronization and sends an error to the user.

/klas

Statistics: Posted by Klas — Wed Jan 30, 2013 10:59 am

Re: Deploying an php validation server

2013-01-30T02:41:42+01:00

Things are nearly working: the ksm returns something that looks good, and the verify runs, but comlains "NOT_ENOUGH_ANSWERS" and /var/log/messages says:

Jan 29 17:36:05 ydb ykval[22607]: LOG_INFO:ykval-queue:synclib:server=http://ydb.peak.org/wsapi/2.0/sync, server_nonce=965f1784df8cb5f769022216560687ca, info=yk_publicname=vvhbtfcndfgv&yk_counter=1&yk_use=13&yk_high=100&yk_low=28704&nonce=b7328dd9e35ba9d49e6245eb500add0a,local_counter=1&local_use=12
Jan 29 17:36:05 ydb ykval[22607]: LOG_ERR:ykval-queue:synclib:Remote server refused our sync request. Check remote server logs.

ksm and validation are both on the same server and there aren't any obvious "remote server logs" to check...ykval-queue.log just says:

[Jan 29 17:35:25] notice: starting ykval-queue daemon, output in: /var/log/ykval-queue.log

Statistics: Posted by abatie — Wed Jan 30, 2013 2:41 am

Re: Deploying an php validation server

2012-08-16T15:42:06+01:00

I checked my php configuration and I saw the curl module was installed but was turned off.
This I finally turned and he works.

had 1 single thing to change in the config to:
$baseParams['__YKVAL_SYNC_POOL__'] = array();
was first
$baseParams['__YKVAL_SYNC_POOL__'] = array("");
there was a quote I forgot to remove.

and finally it works and I'm glad that it works.

Thank you very much for your help!

Statistics: Posted by soldier24 — Thu Aug 16, 2012 3:42 pm

Re: Deploying an php validation server

2012-08-16T06:52:50+01:00

You should change all places in ykval-synclib where it says yubikeys in quotes. The error about curl_multi_init means you don't have the php curl module installed.
It's not really needed when you just have one server and noone to sync with, but the code doesn't know about that.

/klas

Statistics: Posted by Klas — Thu Aug 16, 2012 6:52 am

Re: Deploying an php validation server

2012-08-15T22:24:34+01:00

I have "clients" changed to "val_clients".
I fount multiple yubikeys values. (But I do not see what is and what is not of the database)
If I change them all I get:

Quote:

Fatal error: Call to undefined function curl_multi_init() in C:\xampp\htdocs\yubico\validation\ykval-common.php on line 114

and if I use a used otp I get:

Quote:

h=h46iubJ98aR4NMlc54DDOORq1yk= t=2012-08-15T21:22:17Z0035 status=REPLAYED_OTP

So that detects correctly

if I change nothing of the yubikeys values I get.

Quote:

h=M5HXtZwNrgda9/8yMez2Yt0yMnY= t=2012-08-15T21:21:19Z0170 status=BACKEND_ERROR

Statistics: Posted by soldier24 — Wed Aug 15, 2012 10:24 pm

Re: Deploying an php validation server

2012-08-15T12:57:28+01:00

Great that the KSM is working.

Did you change the database table name to val_yubikeys for the validation server? Since that forum post was written the validation server has been refactored. You'll need to change the tablename in the file ykval-synclib.php.

/klas

Statistics: Posted by Klas — Wed Aug 15, 2012 12:57 pm

Re: Deploying an php validation server

2012-08-15T11:08:13+01:00

It works now.
Yubikey ksm runs correctly now: OK counter=0004 low=8c04 high=d8 use=18
The yubikey-val-server-php is almost ready but i got this: (One day I shall get this working! )

Quote:

Notice: Undefined property: DbImpl::$result in C:\xampp\htdocs\yubico\validation\ykval-db-pdo.php on line 85

Notice: Undefined property: DbImpl::$result in C:\xampp\htdocs\yubico\validation\ykval-db-pdo.php on line 98

Fatal error: Call to a member function closeCursor() on a non-object in C:\xampp\htdocs\yubico\validation\ykval-db-pdo.php on line 99

Statistics: Posted by soldier24 — Wed Aug 15, 2012 11:08 am

Re: Deploying an php validation server

2012-08-15T08:47:08+01:00

On the first server it's probably either an error with the database modules or with connecting to the database.

On the second server you're probably running php 5.4, which comes with it's own hex2bin function, it should give the same results to the one shipped with yubikey-ksm, so you can remove/rename the function in ykksm-utils.php.

/klas

Statistics: Posted by Klas — Wed Aug 15, 2012 8:47 am

Re: Deploying an php validation server

2012-08-15T07:55:24+01:00

I think I've read too fast ... (my wrong )
I have corrected the errors and and behind the first ("Database error ERR") is the following error.

Quote:

Notice: Undefined variable: dbh in C:\webserver\root\yubico\ksm\ykksm-decrypt.php on line 60
Fatal error: Call to a member function query() on a non-object in C:\webserver\root\yubico\ksm\ykksm-decrypt.php on line 60

i`ve tried again on a another server (xampp) and the error is gone but the error is now on that server.

Quote:

Fatal error: Cannot redeclare hex2bin() in C:\xampp\htdocs\yubico\ksm\ykksm-utils.php on line 39

Statistics: Posted by soldier24 — Wed Aug 15, 2012 7:55 am

Re: Deploying an php validation server

2012-08-15T06:55:18+01:00

Did you follow the step in the linked HOWTO where you rename the yubikeys table to ksm_yubikeys (in step 4) in that case you have to change the "...FROM yubikeys..." to read "...FROM ksm_yubikeys..."

The error is written from one of those 'die("ERR Database Error")', modify them so you can see which one. If it's the first one the error is triggered in connecting to the database or loading the database modules. If it's the second one it's triggered on querying the database. You should get the log lines in syslog as well, I guess that depends on what php on windows does with syslog..

/klas

Statistics: Posted by Klas — Wed Aug 15, 2012 6:55 am

Re: Deploying an php validation server

2012-08-14T17:02:40+01:00

i got here 2 screenshots,
one is from my php configuraton with loaded modules.
The second screenshots is from my browser when i now test the otp after i corrected the value LOG_LOCAL0 to LOG_USER
my server logs says nothing about the problem now.

I have a suspicion that the problem is in ykksm-decrypt.php.
I do not know if the perl files is because I do not know the programming language Perl.

Statistics: Posted by soldier24 — Tue Aug 14, 2012 5:02 pm

Re: Deploying an php validation server

2012-08-14T14:05:15+01:00

Hello,

Have you made sure the mysql module is loaded in php? If you're sure that it is, can you paste the exact falure you get here?

/klas

Statistics: Posted by Klas — Tue Aug 14, 2012 2:05 pm