Applications:Achievo authentication module

From Yubico

Achievo authentication module by Gerco Dries

Authentication module for Achievo project management app

» achievo patch

I have written a small and experimental patch to allow Achievo to authenticate using the Yubikey One Time Password device.

In case anyone wants to use it, you may download the patch here: http://gdries.nl/achievo_yubikey.patch for Achievo 1.3.2.

After applying the patch, installing the PEAR module from Yubico and requesting an API key, add the following config options in config.inc.php:

 $config_authentication = "yubikey";
 $config_auth_yubikey_id = <Yubico API ID>;
 $config_auth_yubikey_key = '<Yubico API key>';

And create a field in the "person" table called "auth_yubikey". Now log in as administrator and set a yubikey identity (the first 12 characters of any OTP from your device) for each Employee in the new "Auth yubikey" field and you can authenticate using the Yubikey.

Only the key itself is implemented now. For maximum security, you will need to add a password to the Yubikey to make it true multi-factor authentication.

The nice folks at Achievo have turned this into an Achievo module you can get from their SVN here: http://websvn.ibuildings.nl/wsvn/achievo/modules/yubikey/trunk/#_modules_yubikey_trunk_