Issue #4154: ipa-kdb does not take the user's OTP tokens into account - freeipa

freeipa

#4154 ipa-kdb does not take the user's OTP tokens into account

Closed: Fixed None Opened 10 years ago by npmccallum.

Currently, ipa-kdb enforces the use of tokens if "otp" is in ipaUserAuthType. However, this locks users out before they enroll in tokens. Instead, ipa-kdb should query both for ipaUserAuthType and the number of active tokens.

dpal commented 10 years ago

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1061190

npmccallum commented 10 years ago

https://www.redhat.com/archives/freeipa-devel/2014-February/msg00055.html

pviktori commented 10 years ago

master:

fd55da9 ipa-kdb: validate that an OTP user has tokens

Metadata Update from @npmccallum:
- Issue assigned to npmccallum
- Issue set to the milestone: FreeIPA 4.0 - 2014/02

7 years ago

Metadata

Assignee

npmccallum

Tags

None

Blocking

None

Depending on

None

Priority

normal

Milestone

FreeIPA 4.0 - 2014/02

None

affects_doc

None

source

None

knownissue

None

type

defect

blockedby

None

test_case

None

component

OTP

blocking

None

on_review

keywords

None

test_coverage

None

reviewer

None

external_tracker

None

rhbz

https://bugzilla.redhat.com/show_bug.cgi?id=1061190

tester

None

changelog

None

design

None

freeipa

Source Code

#4154 ipa-kdb does not take the user's OTP tokens into account Closed: Fixed None Opened 10 years ago by npmccallum.

Metadata

#4154 ipa-kdb does not take the user's OTP tokens into account

Closed: Fixed None Opened 10 years ago by npmccallum.