Yubico Forum

YubiX • [Community] - Forum going read only. New KDB on its way.

2018-01-30T09:26:55+01:00

For the security and experience of our user community, we have decided to set the forum as read-only and wipe all user account information. All historical posts and announcements will be archived and remain publicly searchable.

In 2018, we will be publishing a searchable knowledge-base system that allows the community to provide direct feedback on articles and make suggestions that will be reviewed by Yubico staff. We sincerely appreciate the participation of our user forum over the years and hope to continue serving your for years to come.

Statistics: Posted by Tom2 — Tue Jan 30, 2018 9:26 am

YubiX • [QUESTION] - docker container for yubix

2017-05-13T15:02:25+01:00

Can anyone suggest how to create a working docker container for yubix? So far I have tried ubuntu:17.04 and after

Code:

apt-get update
apt-get install -y software-properties-common python-software-properties
add-apt-repository -y ppa:yubico/stable
add-apt-repository -y ppa:yubico/yubix

then
apt-get update
fails with

Code:

Err:8 http://ppa.launchpad.net/yubico/yubix/ubuntu zesty/main amd64 Packages
  404  Not Found
Ign:9 http://ppa.launchpad.net/yubico/yubix/ubuntu zesty/main all Packages
Fetched 19.1 kB in 1s (13.0 kB/s)
Reading package lists... Done
W: The repository 'http://ppa.launchpad.net/yubico/yubix/ubuntu zesty Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://ppa.launchpad.net/yubico/yubix/ubuntu/dists/zesty/main/binary-amd64/Packages  404  Not Found
E: Some index files failed to download. They have been ignored, or old ones used instead.

and of course

Code:

apt-get install -y yubix

fails too with

Code:

Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package yubix

Statistics: Posted by bit — Sat May 13, 2017 3:02 pm

YubiX • Moving question to proper forum

2017-02-14T17:28:54+01:00

I believe I posted this in the wrong forum. I'm moving it. Sorry.

Statistics: Posted by mcdown75 — Tue Feb 14, 2017 5:28 pm

YubiX • YubiX RADIUS CHAP

2016-02-16T20:08:32+01:00

Is it possible to configure the RADIUS server in YubiX to support CHAP? Software is installed on Ubuntu 14.04 (not the appliance). PAP does work, just not CHAP (which is consistent with the documentation stating that it only supports PAP and EAP).

If so, does anyone have directions on how to do it? If not, I'd like to know it's not possible so I don't needlessly pursue it.

Thanks.

Statistics: Posted by jwbrown77 — Tue Feb 16, 2016 8:08 pm

YubiX • Re: [YubiAuth] : Active Directory

2015-11-04T17:20:06+01:00

I finally found a solution for authenticate all the users of my domain,

I set DN = {user.name}@MYDOMAIN.COM and it's working.

Statistics: Posted by Adrien — Wed Nov 04, 2015 5:20 pm

YubiX • [YubiAuth] : Active Directory

2015-11-02T16:12:58+01:00

Hej,

I work for a compagny and we would like to deploy yubikeys. Currently i'm stuck in the freeRadius module in YubiX.If i understand it well in the documentation, yubiAuth is working only with a final DN.

We have different OU and CN for many users and it's not convenient to change the dn each time we want to perform authentifcation for users in different DN.

for e.g :

CN=USR1},CN=Users,DC=XXX,DC=YYY,DC=ZZZ
CN=USR2,CN=Poeple,DC=XXX,DC=YYY,DC=ZZZ

I've got few questions :

1) Does someone successfully patch the yubiAUTH (or the FreeRadius in yubix) to be able to handle with recursive request in AD ?
2) Its is possible to do Ldaps and use a ldap reader account ?

Thank you,

Statistics: Posted by Adrien — Mon Nov 02, 2015 4:12 pm

YubiX • [HELP] - YubiKey not working in Windows (Multiple Version)

2015-10-08T08:23:19+01:00

We have 4 options here, try them in order

(1) Uninstall ALL entries in Device Manager for the NEO.

*If you have U2F enabled, you should see Human Interface Devices > HID-compliant device.
*If you have OTP enabled, you should see Keyboards > HID Keyboard Device.
*If you have CCID enabled, you should see Smart card readers > Microsoft Usbccid Smartcard Reader (WUDF), and Smart cards > Identity Device (NIST SP 800-73 [PIV]).

After all are removed, either "Scan new hardware" or remove the NEO and re-insert.

(2) Uninstall all entries under Universal Serial Bus controllers, and then restart. These will typically be reloaded when you restart.

(3) Use the Intel Driver Update Utility (assuming you are Intel-based), and restart after all drivers are updated. Alternatively, you can download the USB and Chipset drivers from your manufacturer's support website and install.

(4) On Windows 10 if on build 10.0.10240 updating to Windows 10 1511 build 10.0.10586 corrected the issue. You can simply open a cmd prompt and view the system build number at top.

(5) Re-install Windows.

WINDOWS 10
Win 10 - YK4.PNG

NEO
1.PNG

EDGE
2.PNG

Statistics: Posted by Tom2 — Thu Oct 08, 2015 8:23 am

YubiX • Wi-Fi authentication

2015-09-18T07:06:38+01:00

Is it possible to authenticate via FreeRADIUS with Yubikey?

I followed tutorial and Yubix works properly when I try to login for example to OpenVPN.

Statistics: Posted by rws — Fri Sep 18, 2015 7:06 am

YubiX • Re: [HOW TO] Building a YubiX VM with OpenVPN

2015-04-23T09:13:04+01:00

it is fixed now

Statistics: Posted by Tom2 — Thu Apr 23, 2015 9:13 am

YubiX • Re: [HOW TO] Building a YubiX VM with OpenVPN

2015-04-22T19:50:10+01:00

sajeeveka wrote:

I am not able to download this doc.

We are looking into this issue. In the mean time, please download the document from the following link:

https://www.yubico.com/wp-content/uploa ... to_v2c.pdf

Statistics: Posted by David — Wed Apr 22, 2015 7:50 pm

YubiX • Re: [HOW TO] Building a YubiX VM with OpenVPN

2015-04-02T18:41:29+01:00

I am not able o download this doc.

Statistics: Posted by sajeeveka — Thu Apr 02, 2015 6:41 pm

YubiX • [QUESTION] - YubiX-VM isnt working with VirtualBox windows

2015-03-17T20:28:05+01:00

I try booting it and i get this:
piix4_smbus 0000:00:07.0: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr

now i know the VM uses Ubuntu 14.04 LTS - and i have it all set for that - and im using the newest version of VBox so just wondering what else i have to change to get it working - ive tried the drive under SATA,SCSI and IDE, and the various chipsets for them, and the motherboard chipset, what am i doing wrong

Statistics: Posted by CodieRae — Tue Mar 17, 2015 8:28 pm

YubiX • Re: Trying to get Yubix working with Active Directory.

2015-02-26T01:42:42+01:00

I have YubiX working with Active Directory as specified above, but it looks like there are major limitations in how it's implemented.

Is there any way to get authentication working for more than one OU?

For example, say you have these accounts in these pre-defined OUs:

OU=Users1,DC=Subdomain,DC=Domain,DC=net
OU=Users2,DC=Subdomain,DC=Domain,DC=net

So far, the only way I've gotten authentication to work is by using the following:

CN={user.name},OU=Users1,DC=Subdomain,DC=Domain,DC=net

Of which only accounts that are in the Users1 OU can authenticate.

Is there any way to get accounts in both Users1 and Users2 OUs to authenticate?

Statistics: Posted by Stan — Thu Feb 26, 2015 1:42 am

YubiX • Re: Is anyone successfully using Yubix ?

2015-01-01T03:36:04+01:00

It's really too bad that Yubico is just trying to sell keys instead of creating documentation, libraries, resources that make Yubikey access easy to implement.

YubiOTP is a nightmare to get working even for a simple system, Authenticator took forever to get stable, PIV requires me to buy a new key and YubiRadius was discontinued?!? (the last breath of the classic Yubikey, if you ask me)

Luckily, enthusiastic developers like me are willing to do way more than they should to get it to work, as we love the concept.

Statistics: Posted by Morphlin — Thu Jan 01, 2015 3:36 am

YubiX • Re: Is anyone successfully using Yubix ?

2014-12-24T17:09:47+01:00

An alternative solution that maintains full fidelity to the YubiRADIUS solution is the GreenRADIUS – Yubico Edition server. This server is built from the last version of YubiRADIUS (3.6.1) and provides all the functionality available in that release plus many new features. There are direct steps to migrate from YubiRADIUS to GreenRADIUS to ease any transition. Green Rocket Security is also a Yubico partner. Find out more about GreenRADIUS – Yubico Edition by following this link.

Statistics: Posted by GRS — Wed Dec 24, 2014 5:09 pm