Topic: Yubikey authentication using mod_authn_yubikey

[sratrerier]

There's an Apache module mod_authn_yubikey at:

http://datapile.coffeecrew.org/mod_authn_yubikey-yubikey-apache-module/

which I was hoping to use on a Windows server. Does anyone have any experience of this, or able to create a Windows binary?

I'd rather use this module for this authentication, than doing it in my application's code since there isn't an API available for the specific language.

[James Blond]

I tried to compile it, but there are too many errors to try harder

[glsmith]

mod_authn_yubikey.c

apr_password_validate() is declared in apr_md5.h so add an #include to that header file.

around line 360 move:
key.dptr = NULL;
dbUserRecord.dptr = NULL;
below:
apr_time_t lookedUpDate = 0;
(a few lines down basically)

Done.

now that leaves us with libykclient.c, what to do with it I guess is link it in per modules.mk
makefile indicates the need for libcurl, libcurl.dll will need to be in Apache's /bin folder

a problem with libykclient.c is, it uses asprintf() which doesn't exist on windows nor is there an equivalent to it. but there is
http://src.opensolaris.org/source/raw/onnv/onnv-gate/usr/src/lib/libc/port/print/asprintf.c

libykclient.h

Add under the includes:

#define YK_PACKAGE "mod_authn_yubikey"
#define YK_PACKAGE_VERSION "0.1"

then before the #endif at the bottom add

int asprintf(char **str, const char *format, ...);

asprintf.c

for MSVC compatability and a little security from buffer overruns change line 52 to

(void) strcpy_s(newstr, len, string);

of course the (void) probably removes any chance of security since the code does not check for a return of EINVAL but the security of the original strlcpy() (BSD) is questionable from what I read.

=============================================================
[adjust paths to match]

set APACHE=\Apache22
set LCURL=\build3\curl-7.21.7

cl /nologo /O2 /MD /W3 -DWIN32 -D_WIN32 -D _CRT_SECURE_NO_WARNINGS -I%LCURL%\include -I%APACHE%\include /c *.c
link kernel32.lib "%LCURL%\build\lib\libcurl_imp.lib" "%APACHE%\lib\libhttpd.lib" "%APACHE%\lib\libapr-1.lib" "%APACHE%\lib\libaprutil-1.lib" /nologo /subsystem:windows /dll /machine:X86 /out:mod_authn_yubikey.so *.obj
MT -manifest mod_authn_yubikey.so.manifest -outputresource:mod_authn_yubikey.so;2


Will it work? I don't know, it loads.