Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 7:10 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: .NET validation server?
PostPosted: Wed Aug 27, 2008 7:29 pm 
Offline

Joined: Wed Aug 13, 2008 6:48 pm
Posts: 2
Hi,

I am having two questions about the validation server:

1) Does anyone know any open source .NET authorization server?

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?


Thanks in advanced.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Aug 28, 2008 12:06 am 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
Hi, Hongzhang,

Yes some of our customers are asking for it.

viewtopic.php?f=12&t=173

That's a high-priority project in the community's wish list, how long do you this can be done? Since it has been ported to PHP, Perl:

http://yubico.com/developers/library/

I suppose it should be easily doable by an experience developer. And do you expect to share with the community and get a lot of feedback & QA help? Or you plan to polish it on your own and license it to customers?

Let me know how we can help. Thanks

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Thu Aug 28, 2008 2:02 pm 
Offline

Joined: Wed Aug 13, 2008 6:48 pm
Posts: 2
Hi, thanks for your reply. Could you confirm if my understanding (question 2) is correct?

It seems the java validation server I downloaded has only class files, not source code?


Top
 Profile  
Reply with quote  
PostPosted: Thu Aug 28, 2008 4:43 pm 
Offline

Joined: Fri Jun 20, 2008 2:59 am
Posts: 84
We have ported the "basic validation server" to .net and can release it to the community. I will post a link here.


Top
 Profile  
Reply with quote  
PostPosted: Thu Aug 28, 2008 10:15 pm 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
hongzhang wrote:
Hi,

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?


Basically, decrypt the OTP by the AES key corresponding to this Yubikey, then extract and data including TokenId, Counter, TimeStamp and check on them.

See the code working under api.yubico.com here:

http://code.google.com/p/yubikey-server ... ystem.java

Cheers

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Thu Aug 28, 2008 10:18 pm 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
hongzhang wrote:
It seems the java validation server I downloaded has only class files, not source code?


The source code is there:

http://code.google.com/p/yubikey-server ... bico/wsapi

And more documentation here:

yubico-val-server/

Cheers
:geek:

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Fri Sep 05, 2008 7:47 am 
Offline

Joined: Thu Aug 28, 2008 3:12 am
Posts: 5
Hello Everyone,
My company has developed a tool for validating the Yubikey OTP utilizing the .Net Framework for validation server. We have it available in .Net 2.0 framework, we will have in .Net 3.5 based upon your request . If you are interested, please visit our website to view a product demo and download an evaluation version at http://www.yubikeydotnet.com.

Thanks,


Top
 Profile  
Reply with quote  
PostPosted: Tue Sep 09, 2008 2:11 am 
Offline

Joined: Fri Jun 20, 2008 2:59 am
Posts: 84
Finally we have it available. For the latest details of the free .NET released library, see the bottom of the page:

http://www.collectivesoftware.com/Products/AuthLite


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group