Yubico Forum

I’m running YubiRadius 3.5.3 as a VMware VM. It has been up and running for weeks without a problem.

However, Yesterday morning (August 30, 2012) it seems to have stopped working correctly. Our ASA was getting authentication failed responces from the YubiRadius server, even in cases where we are certain the input was correct. The report for “authentication Requests” showed nothing after about 13:00 UTC. No successes and no failures, nothing. Restarting the YubiRadius server did not change anything, and the ASA was still getting auth failure replies. Using the “Troubleshoot” tab I verified that it was correctly processing OTPs, and was getting correct “success” responces. I also verified that the LDAP connection was working by rungging a user import manually, and changing LDAP servers.

The YubiRadius was still returning auth failures.

I then restored a snapshoot/checkpoint from the previous day, and everything worked again... breifly. By the following morning (Today, October 1) it wasn’t working again. Another snapshot/checkpoint restore, and it works breifly again. A few people are able to successfully authenticate, then it start rejecting again. When these authintication rejections are recived by the ASA, the “authentication Requests” report shows nothing.

I have network packet captures if that is helpful. They show the ASA reciving a “Code: Access-Reject (3)” while the YubiRadius shows nothing in it “authentication Requests” report. Prior to this (where the YubiRadius rejects everything) the “authentication Requests” report did correctly show both success and failed authentication atempts.

Any help would be greatly apreciated. What else can I try?

I just receved the following email:


Guess I'm in good company and will just wait...

Hello GregL,

Yubico has released a fix for this issue. Please see this thread:

http://forum.yubico.com/forum/viewtopic.php?f=5&t=865

_________________
-David Maples
Yubico Senior Solutions Engineer
http://www.Yubico.com