Yubico Forum
https://forum.yubico.com/

Yubikey pam api2 gives segfault api1 gives hmac error
https://forum.yubico.com/viewtopic.php?f=5&t=880
Page 1 of 1

Author:  gabriel403 [ Mon Nov 26, 2012 10:21 am ]
Post subject:  Yubikey pam api2 gives segfault api1 gives hmac error

Using a latest version of the yubico pam module
https://aur.archlinux.org/packages.php?ID=21528

when using the new api and having my /etc/pam.d/login stup like this
auth sufficient pam_yubico.so id=<myid> key=<mykey> debug
I get this error in the journal logs
Nov 26 09:17:31 ultor kernel: login[25850]: segfault at 0 ip 00007f77faabb497 sp 0000...000]


When I switch to using the old api and configuring pam like this
auth sufficient pam_yubico.so id=<myid> key=<mykey> url=http://api.yubico.com/wsapi/verify?id=%d&otp=%s debug
I get this in my /var/run/pam-debug.log
[pam_yubico.c:pam_sm_authenticate(953)] ykclient return value (104): HMAC signature validation/generation error
[pam_yubico.c:pam_sm_authenticate(993)] done. [Authentication service cannot retrieve authentication info]


Any ideas?

Author:  gabriel403 [ Mon Nov 26, 2012 10:36 am ]
Post subject:  Re: Yubikey pam api2 gives segfault api1 gives hmac error

switched the url to this and it seemed to work ok
url=https://api.yubico.com/wsapi/2.0/verify?id=%d&otp=%s

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/