This project implements an extension to the Plaintext authentication module provided by Dokuwiki, which allows a user to optionally use their Yubikey OTP to authenticate instead of their password.

Installation is quite simple. First you must download and verify the release package (specified in the releases section of this page).

Next extract the package on top of your DokuWiki installation directory (we'll assume it's ${DOKU} and the path to the release package is ${yubi}).

unzip ${yubi} -d ${DOKU}

Next you need to replace the YubiKey API ID with your own in order to communicate with the YubiKey servers.

Open the file inc/auth/yubikey.class.php and change where AUTH_YUBIKEY_API_ID is set to -1 to be set to your personal API ID.

The backend will be enabled with the config:authtype configuration option

$conf['authtype'] = "yubikey";

(this should be in your conf/local.php)

The yubikey auth module extends the default auth:plain module, so configuration, addition, and deletion of users is done through that module.

(this should be done in conf/users.auth.php)

Yubikey IDs are associated to users in a file format similar to the plain auth module's users.auth.php.

Empty lines, and everything after a # character are ignored. Each line contains a colon separated array of 2 fields which are:

• Login - This has to be a valid login.
• Yubikeys - Comma separated list of Yubikey OTP IDs (the first 12 characters when a Yubikey enters its OTP.

Example:

myuser:vvjdrjbfgtcd,vvlrndlkkkck

(this should be done in conf/yubikey.auth.php)

Source for this module can be found on github:

http://github.com/cvpcs/dokuwiki_auth_yubikey

The latest source can always be downloaded from this location:

dokuwiki_auth_yubikey-latest.zip