Yubico Forum
https://forum.yubico.com/

OpenId server source code
https://forum.yubico.com/viewtopic.php?f=16&t=55
Page 1 of 1

Author:  Simon [ Sat May 24, 2008 12:04 pm ]
Post subject:  OpenId server source code

If you have missed it, all the code for our server is available from google code:

http://code.google.com/p/yubico-openid-server/

If you have any questions about it, this topic could be used..

/Simon

Author:  hasterguf [ Sun May 25, 2008 5:16 pm ]
Post subject:  Re: OpenId server source code

Thank your for publishing the code for the open-ID server. I just noticed that the way it authenticates the yubikey itself is by connecting to your site, therefore making my own open-ID implementation dependent on your servers.

Do you by any chance have the AES-decoding/modhex-routines in PHP? That would make my implementation 100% independent of your servers.

Best regards,
Alex

Author:  ELMIT [ Thu Jun 12, 2008 4:07 pm ]
Post subject:  Re: OpenId server source code

I have installed the server into the directory /usr/share/php/yubico-openid-server/
I created the directory /usr/local/xxx/OpenIDs/ for the keys.
A sym link makes the /examples/consumer/ htdocs of the webserver
Another sym link makes /example/server/ htdocs/server

I login at my pip.verisignlab.com with my OpenID (me3332) point my OpenID URL (http://me3332.pip.verisignlabs.com) in the form of my root web page of the yubico-openid-server and will be recognized.

Then I tried to use the /server and get a prompt for my yubikey. When I put in this information, the screen remains empty. The log file shows:

Quote:
PHP Fatal error: Call to a member function verify() on a non-object in /usr/share/php/yubico-openid-server/examples/server/lib/session.php on line 117, referer: http://openid.elmit.net/server/server.php


The last lines of session.php around line 117 are:

117 $auth = $yubi->verify($yubikey);
118 if (PEAR::isError($auth)) {
119 return array(array('Authentication failure: ' . $auth->getMessage() .
120 '<!-- Debug output from server: ' . $yubi->getLastResponse() . '-->'),


What am I missing?

bye

R.

Author:  ZakMcKraken [ Sun Jun 15, 2008 5:23 pm ]
Post subject:  Re: OpenId server source code

hasterguf wrote:
Do you by any chance have the AES-decoding/modhex-routines in PHP? That would make my implementation 100% independent of your servers.


You can find php classes in this topic

;)

Author:  Simon [ Sun Jun 15, 2008 11:52 pm ]
Post subject:  Re: OpenId server source code

ELMIT wrote:
Then I tried to use the /server and get a prompt for my yubikey. When I put in this information, the screen remains empty. The log file shows:

Quote:
PHP Fatal error: Call to a member function verify() on a non-object in /usr/share/php/yubico-openid-server/examples/server/lib/session.php on line 117, referer: http://openid.elmit.net/server/server.php


The last lines of session.php around line 117 are:

117 $auth = $yubi->verify($yubikey);
118 if (PEAR::isError($auth)) {
119 return array(array('Authentication failure: ' . $auth->getMessage() .
120 '<!-- Debug output from server: ' . $yubi->getLastResponse() . '-->'),


What am I missing?


Most likely you are missing the instructions to modify config.php to use the Yubico PHP module, see:

http://code.google.com/p/yubico-openid- ... adMeYubico

If you don't do this step, $yubi will be null and the code will fail with that error message.

Good luck...

/Simon

Author:  ELMIT [ Sun Jun 29, 2008 10:18 am ]
Post subject:  Re: OpenId server source code

Simon,

thanks, indeed I forgot to add the magic:
$yubi = &new Auth_Yubico('CLIENT-API-ID', 'CLIENT-API-KEY');

To find the CLIENT-API-ID and CLIENT-API-KEY I used the web application.

I still need a push to get to the next level. I can now use ONE key. What do I need to modify for multiple keys?
Currently I am using config-with-store-file.


((BTW, is this forum moderated? I am sure I posted above already yesterday, but cannot find it in the forum. I am therefore not sure if something gone wrong with the submit of it is moderated))

bye

R.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/