Yubico Forum
https://forum.yubico.com/

.NET validation server?
https://forum.yubico.com/viewtopic.php?f=5&t=172		 Page 1 of 1
Author:  hongzhang [ Wed Aug 27, 2008 7:29 pm ]
Post subject:  .NET validation server?
Hi,

I am having two questions about the validation server:

1) Does anyone know any open source .NET authorization server?

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?


Thanks in advanced.
Author:  paul [ Thu Aug 28, 2008 12:06 am ]
Post subject:  Re: .NET validation server?
Hi, Hongzhang,

Yes some of our customers are asking for it.

viewtopic.php?f=12&t=173

That's a high-priority project in the community's wish list, how long do you this can be done? Since it has been ported to PHP, Perl:

http://yubico.com/developers/library/

I suppose it should be easily doable by an experience developer. And do you expect to share with the community and get a lot of feedback & QA help? Or you plan to polish it on your own and license it to customers?

Let me know how we can help. Thanks
Author:  hongzhang [ Thu Aug 28, 2008 2:02 pm ]
Post subject:  Re: .NET validation server?
Hi, thanks for your reply. Could you confirm if my understanding (question 2) is correct?

It seems the java validation server I downloaded has only class files, not source code?
Author:  ferrix [ Thu Aug 28, 2008 4:43 pm ]
Post subject:  Re: .NET validation server?
We have ported the "basic validation server" to .net and can release it to the community. I will post a link here.
Author:  paul [ Thu Aug 28, 2008 10:15 pm ]
Post subject:  Re: .NET validation server?
hongzhang wrote:
Hi,

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?


Basically, decrypt the OTP by the AES key corresponding to this Yubikey, then extract and data including TokenId, Counter, TimeStamp and check on them.

See the code working under api.yubico.com here:

http://code.google.com/p/yubikey-server ... ystem.java

Cheers
Author:  paul [ Thu Aug 28, 2008 10:18 pm ]
Post subject:  Re: .NET validation server?
hongzhang wrote:
It seems the java validation server I downloaded has only class files, not source code?


The source code is there:

http://code.google.com/p/yubikey-server ... bico/wsapi

And more documentation here:

yubico-val-server/

Cheers
:geek:
Author:  coolzero [ Fri Sep 05, 2008 7:47 am ]
Post subject:  Re: .NET validation server?
Hello Everyone,
My company has developed a tool for validating the Yubikey OTP utilizing the .Net Framework for validation server. We have it available in .Net 2.0 framework, we will have in .Net 3.5 based upon your request . If you are interested, please visit our website to view a product demo and download an evaluation version at http://www.yubikeydotnet.com.

Thanks,
Author:  ferrix [ Tue Sep 09, 2008 2:11 am ]
Post subject:  Re: .NET validation server?
Finally we have it available. For the latest details of the free .NET released library, see the bottom of the page:

http://www.collectivesoftware.com/Products/AuthLite
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/