Yubico Forum

Hello all,

I put together a squirrelmail plugin to enable yubikey otp authentication. It appears to work for me but I was hoping for a few testers before I submit to the squirrelmail devs. Please provide feedback. Thanks!

Thanks also goes to the roundcube mod, it helped me figure out what to do.

richard

I migrated the code to Tom Corwine's PHP module which is more complete than the implementation I was using. It actually checks the authentication response's signature which should prevent a man in the middle attack with the auth service. With this new php module, the $yubico_server_id variable in config.php needs to be in integer form. If you tried the original plugin you'll need to remove the quotes.

I also started a Wiki page here: http://wiki.yubico.com/wiki/index.php/Applications:Squirrelmail_Plugin

richard

Here is a new version that supports entering your traditional password and the OTP in one field or in separate fields. This requires a new variable in config.php, see README.

http://yubico-squirrelmail-plugin.googlecode.com/files/yubikey-0.3-1.4.0.tar.gz

richard

Ok.. I have now created a google code page to host the plugin archives. Please check there for updates as well as the yubico wiki page. Version 0.4 was released yesterday. Still waiting for feedback. Thanks.

richard

http://code.google.com/p/yubico-squirrelmail-plugin/

http://wiki.yubico.com/wiki/index.php/Applications:Squirrelmail_Plugin

Version 0.5 Released, see Wiki for a download link.

_________________
richard

You might want to add a note in the Requirements section of the README that this requires PHP 5.2.0 or later.

I tried installing it on a RHEL 5/CentOS 5 box, but the official PHP is still 5.1.6 so there is no date_format() and relatives.