Yubico Forum

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-07-15T13:59:28+01:00

I bought 2 Yubikeys for use with Joomla 2.5.
It seems to be easy to use the Component and Plugin but they do not work under Joomla 2.5.22.

Has anybody an Idea to use the Two-Factor-Authentication with Joomla 2.5.22? I think there are many Sites with this Version of Joomla.

Statistics: Posted by ckuntze — Tue Jul 15, 2014 1:59 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-05-01T03:33:26+01:00

Seem like yubikey only supported up to Joomla version 2.5.17 , version after 2.5.17 are not supported anymore

Statistics: Posted by jiunnyik — Thu May 01, 2014 3:33 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-19T01:26:45+01:00

wayne wrote:

Jiunnyik --

Using an updated (not fresh install) version 2.5.19 of Joomla I created a new user with the Joomla User Manager. I then tried to log in as this new user (before adding them to the Yubikey list). The new user COULD NOT log-in. The login attempt produced the same error message that you describe ("Username and password do not match or you do not have an account yet"). I found this post on the Joomla Forum [ http://forum.joomla.org/viewtopic.php?f=673&p=3152668 ] that describes the same (or maybe similar) problem. I have NOT tried the fix described in that post.

Have you confirmed that your newly created user can log-in before being added to the Yubikey list?

-- Wayne

Wayne

Yes, I confirm the newly created user can log-in before added to the Yubikey list.

Statistics: Posted by jiunnyik — Wed Mar 19, 2014 1:26 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-18T22:26:40+01:00

I am having this same issue. When Joomla Authentication is on the user can log-in fine. However when trying to use the Yubikey it fails. This is true for any new user I try to add even though they are able to work or previous sites. This is new with Joomla 2.5.19. I posted on the Google Code page as well: https://code.google.com/p/joomla-yubike ... etail?id=8

Statistics: Posted by mikedemo — Tue Mar 18, 2014 10:26 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-18T18:41:55+01:00

jiunnyik wrote:

wayne wrote:

Please try create a new user, and add the user to the yubikey. You will see the problem.

Statistics: Posted by wayne — Tue Mar 18, 2014 6:41 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-18T03:59:52+01:00

Tested with fresh installation of Joomla 2.5.19, it is still not working with error message: Username and password do not match or you do not have an account yet.

Statistics: Posted by jiunnyik — Tue Mar 18, 2014 3:59 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-18T03:59:03+01:00

wayne wrote:

jiunnyik wrote:

Yubikey is not working with Joomla 2.5.18.

I updated an installation of Joomla from 2.5.17 directly to 2.5.19 with the patch available as of 9 Mar 2014. After the update the Yubikey worked as it always has--without any problems.

-- Wayne

Hi Wayne,

Please try create a new user, and add the user to the yubikey. You will see the problem.

Statistics: Posted by jiunnyik — Tue Mar 18, 2014 3:59 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-03-09T23:21:47+01:00

jiunnyik wrote:

Yubikey is not working with Joomla 2.5.18.

I updated an installation of Joomla from 2.5.17 directly to 2.5.19 with the patch available as of 9 Mar 2014. After the update the Yubikey worked as it always has--without any problems.

-- Wayne

Statistics: Posted by wayne — Sun Mar 09, 2014 11:21 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-02-20T08:34:06+01:00

James should be subscribed to this topic and reply you about the plugin (i suspect)

Statistics: Posted by Tom — Thu Feb 20, 2014 8:34 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-02-19T18:06:56+01:00

Tom wrote:

This plugin should be outdated now as Joomla as native support for the Yubikey.

This is true for the up-to-date 3.x version of Joomla. However the 2.5.x line is still under active development and support and will be through 31 December 2014. AFAIK, the 2.5.x line has no native support for the Yubikey.

Statistics: Posted by wayne — Wed Feb 19, 2014 6:06 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-02-19T13:30:36+01:00

Hello,

This plugin should be outdated now as Joomla as native support for the Yubikey.

Statistics: Posted by Tom — Wed Feb 19, 2014 1:30 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2014-02-19T01:21:39+01:00

Hi,

Yubikey is not working with Joomla 2.5.18. Tested fresh installation not working as well. During login session , it is showing wrong username / password.

Any clue ?

Now I have to downgrade my joomla to 2.5.17.

Thanks.

Statistics: Posted by jiunnyik — Wed Feb 19, 2014 1:21 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2013-04-21T23:00:11+01:00

Hi James --

I have your Joomla plugin/component installed and working.

I want to ignore your admonition to retain at least one user who is NOT Yubikey enabled--as a fail safe in case the Yubico server is not reachable. My preferred "fail safe" is to re-enable the Joomla authentication plugin by changing its status directly in the database. I've tested this and it appears to work.

Is there anything about your plugin that might preclude my preferred fail safe from working?

Are there other reasons this might not be a good idea?

Thanks for your comments,

-- Wayne

Statistics: Posted by wayne — Sun Apr 21, 2013 11:00 pm

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2013-04-09T02:09:33+01:00

That is right.
It works just like you described.
THANKS!

Statistics: Posted by corax — Tue Apr 09, 2013 2:09 am

Re: [PROJECT] - Joomla! CMS - Yubikey Authentication Plugin

2013-04-09T00:21:34+01:00

corax wrote:

Thanks James,

I understand that but...

I would like some (not all) users to have to use Yubikey to login (but can't use also user+pass combination)
For others, I would like to leave them to use normal user+pass only.
Can you tell me is this possible?

Hi Corax,

Yes this is exactly how the YubiKey plugin is designed to work. When you initially enable the "Authentication - Yubikey" plug-in and disable the "Authentication - Joomla" plugin, your Joomla installation will work the same for your users. When they enter their user+pass combination they will be able to login as they have in the past. When you log into the Joomla Administrator page and access the YubiKey Authentication component, you will be able to assign a YubiKey to specific users. Once you do this, the users you assign a YubiKey to will be required to log into Joomla with the username+(password+(YubiKey One Time Password)) password. If these YubiKey users try to log into Joomla with only a user+pass combination it will not work.

- James

Statistics: Posted by James — Tue Apr 09, 2013 12:21 am