rooty/yubikey-val
1
0
Fork 0
mirror of https://github.com/Yubico/yubikey-val.git synced 2024-11-29 00:24:13 +01:00
Code Issues Projects Releases Wiki Activity

Cosmetic changes.

Browse Source
This commit is contained in:
Jean Paul Galea 2015-07-15 15:05:04 +02:00
parent 9a179f37ea
commit 087b38496b
1 changed files with 34 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
ykval-config.php
View File

@ -27,11 +27,13 @@
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//ykval will use the configuration stored in /etc/yubico/val/config-db.php, if that file exists. If it does not exist, the below values will be used. // ykval will use the configuration stored in /etc/yubico/val/config-db.php, if that file exists. If it does not exist, the below values will be used.
if (file_exists('/etc/yubico/val/config-db.php'))
if(file_exists('/etc/yubico/val/config-db.php')) { {
include '/etc/yubico/val/config-db.php'; include '/etc/yubico/val/config-db.php';
} else { }
else
{
$dbuser='ykval_verifier'; $dbuser='ykval_verifier';
$dbpass='yourpassword'; $dbpass='yourpassword';
$basepath=''; $basepath='';
@ -41,22 +43,27 @@ if(file_exists('/etc/yubico/val/config-db.php')) {
$dbtype='mysql'; $dbtype='mysql';
} }
# For the validation interface. # for the validation interface.
$baseParams = array (); $baseParams = array ();
$baseParams['__YKVAL_DB_DSN__'] = "$dbtype:dbname=$dbname;host=127.0.0.1"; # "oci:oracledb" for Oracle DB (with OCI library) $baseParams['__YKVAL_DB_DSN__'] = "$dbtype:dbname=$dbname;host=127.0.0.1"; # "oci:oracledb" for Oracle DB (with OCI library)
$baseParams['__YKVAL_DB_USER__'] = $dbuser; $baseParams['__YKVAL_DB_USER__'] = $dbuser;
$baseParams['__YKVAL_DB_PW__'] = $dbpass; $baseParams['__YKVAL_DB_PW__'] = $dbpass;
$baseParams['__YKVAL_DB_OPTIONS__'] = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION); $baseParams['__YKVAL_DB_OPTIONS__'] = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION);
# For the validation server sync # for the validation server sync
$baseParams['__YKVAL_SYNC_POOL__'] = array(/*"http://api2.example.com/wsapi/2.0/sync",*/ $baseParams['__YKVAL_SYNC_POOL__'] = array(
/*"http://api3.example.com/wsapi/2.0/sync",*/ // "http://api2.example.com/wsapi/2.0/sync",
/* "http://api4.example.com/wsapi/2.0/sync"*/); // "http://api3.example.com/wsapi/2.0/sync",
// "http://api4.example.com/wsapi/2.0/sync",
);
# An array of IP addresses allowed to issue sync requests # An array of IP addresses allowed to issue sync requests
# NOTE: You must use IP addresses here. # NOTE: You must use IP addresses here.
$baseParams['__YKVAL_ALLOWED_SYNC_POOL__'] = array(/*"1.2.3.4",*/ $baseParams['__YKVAL_ALLOWED_SYNC_POOL__'] = array(
/*"2.3.4.5",*/ // "1.2.3.4",
/*"3.4.5.6"*/); // "2.3.4.5",
// "3.4.5.6",
);
# An array of IP addresses allowed to issue YubiKey activation/deactivation # An array of IP addresses allowed to issue YubiKey activation/deactivation
# requests through ykval-revoke.php. NOTE: You must use IP addresses here. # requests through ykval-revoke.php. NOTE: You must use IP addresses here.
@ -83,30 +90,29 @@ $baseParams['__YKVAL_SYNC_DEFAULT_TIMEOUT__'] = 1;
# A key -> value array with curl options to set # A key -> value array with curl options to set
# when calling URLs defined in __YKVAL_SYNC_POOL__ # when calling URLs defined in __YKVAL_SYNC_POOL__
$baseParams['__YKVAL_SYNC_CURL_OPTS__'] = array( $baseParams['__YKVAL_SYNC_CURL_OPTS__'] = array(
//CURLOPT_PROTOCOLS => CURLPROTO_HTTP, //CURLOPT_PROTOCOLS => CURLPROTO_HTTP,
); );
# A key -> value array with curl options to set # A key -> value array with curl options to set
# when calling URLs returned by otp2ksmurls() # when calling URLs returned by otp2ksmurls()
$baseParams['__YKVAL_KSM_CURL_OPTS__'] = array( $baseParams['__YKVAL_KSM_CURL_OPTS__'] = array(
//CURLOPT_PROTOCOLS => CURLPROTO_HTTP, //CURLOPT_PROTOCOLS => CURLPROTO_HTTP,
); );
// otp2ksmurls: Return array of YK-KSM URLs for decrypting OTP for // Returns an array of YK-KSM URLs for decrypting $otp for $client.
// CLIENT. The URLs must be fully qualified, i.e., contain the OTP // The URLs must be fully qualified, i.e., containing the OTP itself.
// itself.
function otp2ksmurls ($otp, $client) { function otp2ksmurls ($otp, $client) {
//if ($client == 42) { //if ($client == 42) {
// return array("http://another-ykkms.example.com/wsapi/decrypt?otp=$otp"); // return array("http://another-ykkms.example.com/wsapi/decrypt?otp=$otp");
//} //}
//if (preg_match ("/^dteffujehknh/", $otp)) { //if (preg_match ("/^dteffujehknh/", $otp)) {
// return array("http://different-ykkms.example.com/wsapi/decrypt?otp=$otp"); // return array("http://different-ykkms.example.com/wsapi/decrypt?otp=$otp");
//} //}
return array( return array(
//"http://ykkms1.example.com/wsapi/decrypt?otp=$otp", // "http://ykkms1.example.com/wsapi/decrypt?otp=$otp",
//"http://ykkms2.example.com/wsapi/decrypt?otp=$otp", // "http://ykkms2.example.com/wsapi/decrypt?otp=$otp",
"http://127.0.0.1/wsapi/decrypt?otp=$otp" "http://127.0.0.1/wsapi/decrypt?otp=$otp",
); );
} }