Yubico Forum

I have installed the Yubikey Module for Drupal 6 and configured it with the API-Key and the ID i got from https://api.yubico.com/get-api-key. But when I try to register a yubikey to a user I always get the error message "Sorry, YubiKey OTP validation failed with message: ERROR CONNECTING TO YUBICO - 77"

Can someone give me a hint?
Thanks!

Andreas Chlumsky

We have tested the Drupal YubiKey module in our test environment and it is working fine.

We would appreciate if you can perform following sequence of activities:

1) Check if you are able to successfully verify the YubiKey OTP using the link given below:

http://www.yubico.com/demo/one_factor.php

2) For the YubiKey module configuration in Drupal, use the following values:


a) API Key: <Your Client API Key>, for example: API Key = Cza4om4Ds5DrQijNJpnNLS83+oA=
b) API ID: <Your Client ID>, for example: API ID = 4556


More information regarding the API ID (Client ID), please refer to the following forum link:

viewtopic.php?f=6&t=191&p=1042&hilit=ssh+pam+debian#p1042

3) Make sure you have internet connectivity while configuring the YubiKey Drupal module. (From the error message posted by you, it seems the OTP validation request is not reaching the live Yubico validation server)

We hope this helps !

How about this error:

Sorry, YubiKey OTP validation failed with message: BAD TIMESTAMP

Key has worked fine up until today. Also worked to login here. Any ideas?

It seems that the YubiKey OTP is not authenticating properly. We would appreciate if you can try validating the OTP at the following link:

http://www.yubico.com/demo/one_factor.php

We should get status=OK as shown below, if the OTP is successfully validated:

I tracked down my issue.

The issue is the time setting between the client and the server. Even with a liberal fudge factor for key authentication it was not enough.

I've updated the instructions on my local version that informs users they should use internet time servers to set their clocks. I suggest adding something in the official distribution with the same message.

How do I associate a Yubikey to a user account?

You need to install the Drupal YubiKey module in order to assign a YubiKey to a user. For more information about Drupal YubiKey module, please visit the following link:

http://wiki.yubico.com/wiki/index.php/A ... Drupal_CMS

We hope this helps!

Here is what I've got on my drupal 6 (on windows vista) yubico module while YubiKey assign for user:

Sorry, YubiKey OTP validation failed with message: ERROR CONNECTING TO YUBICO - 60

I've properly set API Key and API ID on yubico module settings. I've received them from https://api.yubico.com/get-api-key/.
I've tried to generate new API Key and API ID but they also doesn't work and the same exception happen while assign yubikey to user.

Please advice.

From the error message provided by you, it seems that the Drupal module is not able to connect to the Yubico online OTP validation server.

Please make sure that the machine on which you have installed Drupal has internet connection and it is able to reach the Yubico online OTP validation server by using the following link:

http://www.yubico.com/demo/one_factor.php

We hope this helps!

I just came across this problem when using the Yubikey Drupal module and the problem turned out to be that no SSL certificate authority certs were installed on the server running Drupal, so the cURL library couldn't create a secure connection to the API server.

In case of Debian or Ubuntu: