Yubico Forum

Hi,

I am having two questions about the validation server:

1) Does anyone know any open source .NET authorization server?

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?


Thanks in advanced.

Hi, Hongzhang,

Yes some of our customers are asking for it.

viewtopic.php?f=12&t=173

That's a high-priority project in the community's wish list, how long do you this can be done? Since it has been ported to PHP, Perl:

http://yubico.com/developers/library/

I suppose it should be easily doable by an experience developer. And do you expect to share with the community and get a lot of feedback & QA help? Or you plan to polish it on your own and license it to customers?

Let me know how we can help. Thanks

_________________
The YubiKey Server Guy

Hi, thanks for your reply. Could you confirm if my understanding (question 2) is correct?

It seems the java validation server I downloaded has only class files, not source code?

We have ported the "basic validation server" to .net and can release it to the community. I will post a link here.

Basically, decrypt the OTP by the AES key corresponding to this Yubikey, then extract and data including TokenId, Counter, TimeStamp and check on them.

See the code working under api.yubico.com here:

http://code.google.com/p/yubikey-server ... ystem.java

Cheers

_________________
The YubiKey Server Guy

The source code is there:

http://code.google.com/p/yubikey-server ... bico/wsapi

And more documentation here:

yubico-val-server/

Cheers

_________________
The YubiKey Server Guy

Hello Everyone,
My company has developed a tool for validating the Yubikey OTP utilizing the .Net Framework for validation server. We have it available in .Net 2.0 framework, we will have in .Net 3.5 based upon your request . If you are interested, please visit our website to view a product demo and download an evaluation version at http://www.yubikeydotnet.com.

Thanks,

Finally we have it available. For the latest details of the free .NET released library, see the bottom of the page:

http://www.collectivesoftware.com/Products/AuthLite