freeipa.git/daemons, branch testotp

Teach ipa-pwd-extop to respect global ipaUserAuthType settings

2014-02-11T12:41:12+00:00

https://fedorahosted.org/freeipa/ticket/4105

Add OTP sync support to ipa-pwd-extop

2014-02-11T12:41:05+00:00

Add HOTP support

2014-02-11T12:19:16+00:00

Add OTP last token plugin

2014-02-10T17:13:21+00:00

This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.

Add libotp internal library for slapi plugins

2014-02-10T17:12:40+00:00

Enable building in C99 mode

2014-02-10T17:08:57+00:00

C99 is supported on all compilers we target and
provides some useful features, including:
  * Standard struct initializers
  * Compound literals
  * For-loop declarations
  * Standard bool type
  * Variable arrays (use with caution)
  * Too many others to mention...

ipa-kdb: validate that an OTP user has tokens

2014-02-10T17:05:03+00:00

This handles the case where a user is configured for OTP in ipaUserAuthType,
but the user has not yet created any tokens. Until the user creates tokens,
the user should still be able to log in via password. This logic already
exists in LDAP, but ipa-kdb needs to perform the same validation to know
what data to return to the KDC.

https://fedorahosted.org/freeipa/ticket/4154

ipa-lockout: do not fail when default realm cannot be read

2014-02-04T11:44:45+00:00

When ipa-lockout plugin is started during FreeIPA server installation,
the default realm may not be available and plugin should then not end
with failure.

Similarly to other plugins, start in degraded mode in this situation.
Operation is fully restored during the final services restart.

https://fedorahosted.org/freeipa/ticket/4085

Fallback to global policy in ipa-lockout plugin

2014-02-03T07:57:14+00:00

krbPwdPolicyReference is no longer filled default users. Instead, plugins
fallback to hardcoded global policy reference.

Fix ipa-lockout plugin to fallback to it instead of failing to apply
the policy.

https://fedorahosted.org/freeipa/ticket/4085

BUILD: Fix portability of NSS in file ipa_pwd.c

2014-01-28T15:35:34+00:00

Tested-by: Timo Aaltonen