[ABD] Yubikey Login 1.0.2

[modelrockettier]

Modification Name: Yubikey Login
Author: ModelRockettier

Modification Description: Allows users to log in using their Yubico Yubikey.
Modification Version: 1.0.2

Features:

• User login with a Yubikey (through use of the Yubico API)

• Multifactor authentication

• Users can easily reset multifactor settings if Yubikey is lost/stolen

• Multiple Yubikeys attached to the same account

• Personal Yubikey management through the UCP

• Admin Yubikey management through the ACP

• Easily enable/disable the mod and edit the Yubico API settings through the ACP

Screenshots: Gallery

Demo URL: http://forums.clan-555.com
Demo User: The nature of the demo requires that users have a Yubikey and create an account

Modification Download: Download

Additional Notes: PHP 5 with cURL support highly recommended, however it fall back to HTTPS using fsockopen with OpenSSL, and further fall back to querying the Yubico servers over unencrypted HTTP via fsockopen if both cURL and OpenSSL are not enabled.
Although PHP5 is recommended, everything except signature verification (from the yubico servers) will work in PHP 4.

[modelrockettier]

any feedback would be appreciated

[rossnick]

I installed the version 1.0.1 of this mod onto my forum. I am in the process of translating into french the langure. I would like to have some explainaition of the 3 radio options in the UCP section. I'm not sure about the exact difference between the 3 options.

[modelrockettier]

The first one, "Deny Yubikey login without username", makes it so that the user can't log in with just a Yubikey OTP (so they would need their username and then either a password or an OTP).

The second one, "Require Yubikey to log in", disables the username/password login.

The third one, "User multifactor authentication", requires the user to log in with a valid yubikey OTP, username, and password (all 3 fields must be filled with valid information). Also, this option by nature selects the previous two options.

[rossnick]

Thanks, I'll provide the translated file into french when I'm finished...

[modelrockettier]

Alright, Thanks for the feedback, I will try to improve the wording for those options in the next version

[modelrockettier]

After a long absence, I have submitted version 1.0.2 for validation into the mod database. Any feedback will be appreciated.

[prova2123]

Hello, can you give some better indication on how to install this in PHPBB after having installed all the necessary software (php curl etc...)

thank you

[modelrockettier]

It's as simple as opening up the install.xml file in a web browser and following the instructions.

[shiftingtin.com]

Thanks for the mod, downloaded. I will let you know of any issues I encounter with it.

[prova2123]

Does it work with postgres sql?

[prova2123]

Does it work with postgres sql?

Yes i works, just little modification in the index.php to conver the SQL

INTEGER(x) -> INTEGER
UNSIGNED -> nothing
IF NOT -> postgres version above 9.1

[modelrockettier]

Does it work with postgres sql?

Yes i works, just little modification in the index.php to conver the SQL

INTEGER(x) -> INTEGER
UNSIGNED -> nothing
IF NOT -> postgres version above 9.1

Thanks for the information,
I'll try to make the mod a little more database-agnostic in the next version, which I'm hoping I'll get some time to finish up before the end of the year.

[prova2123]

I think there is an issue with subsilver...

I am not sure, but the log in page is missing the user name and password field, or am i wrong?

[prova2123]

never mind it works...

the issue is that if you do not activate subsilver BEFORE the installation, then it will not work ofc..

i tried to copy the prosilver files inside the subsilver one and it didnt work...

i didnt know that the code was so different from the two styles...