roundcube-yubikey-plugin

Use Yubico's YubiKey to authentication on Roundcube webmail.

The plugin is known to be working in production with Roundcube version 0.9, 0.8 and 0.7.

##Features

Support alternative API servers - see yubikey_api_url
Validation of the token is done via HMAC-SHA1 authentication over HTTPS (with certificate and hostname validation)
Usage enforcement or in other words disallow yubikey opt-out (disabled by default) - see yubikey_disallow_user_changes

Requirements

Install the code in the plugin directory (i.e. roundcube/plugins/yubikey_authentication/).
Add the plugin in your config file (config/main.inc.php). In this case the plugin directory name is 'yubikey_authentication'

$rcmail_config['plugins'] = array('yubikey_authentication');

Set your API keys in config.inc.php by visiting https://api.yubico.com/get-api-key/

$rcmail_config['yubikey_api_id']  = 'ID HERE'; 
$rcmail_config['yubikey_api_key'] = 'KEY HERE';

Login normally and configure your yubikey in "Settings/Server Settings" menu:
Ensure "Require YubiKey OTP" is checked
Set your "YubiKey ID" by simply pressing on your yubikey (only the first 12 chars will be used).
Test your installation. You're done!

GPL2

This code is based on work done by Oliver Martin which was using patches from dirkm.

Danny Fullerton - Mantor Organization