diff options
| author | Nathaniel McCallum <npmccallum@redhat.com> | 2013-04-11 13:50:42 -0400 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-05-17 09:30:51 +0200 |
| commit | 5d51ae50a59466fa2d6d230d7f2879de34210f0c (patch) | |
| tree | ab0e851651e14b8a44664199d2160766335cf6c4 /daemons/ipa-otpd | |
| parent | cb689354357d5311e7ecb231a34e867c23b8a803 (diff) | |
| download | freeipa-5d51ae50a59466fa2d6d230d7f2879de34210f0c.tar.gz freeipa-5d51ae50a59466fa2d6d230d7f2879de34210f0c.tar.xz freeipa-5d51ae50a59466fa2d6d230d7f2879de34210f0c.zip | |
ipa-kdb: Add OTP support
If OTP is enabled for a user, then:
1. Long-term keys are not provided to KDB
2. The user string 'otp' is defined to KDB
Since it is not secure to send radius configuration information
over krb5 user strings, we simply set the string to a known default
('[]') which enables the default configuration in the KDC.
https://fedorahosted.org/freeipa/ticket/3561
http://freeipa.org/page/V3/OTP
Diffstat (limited to 'daemons/ipa-otpd')
0 files changed, 0 insertions, 0 deletions