.git/daemons, branch master

libotp: do not call internal search for NULL dn

2014-02-21T09:27:34+00:00

Reviewed-By: Nathaniel McCallum

Teach ipa-pwd-extop to respect global ipaUserAuthType settings

2014-02-21T09:26:02+00:00

https://fedorahosted.org/freeipa/ticket/4105

Reviewed-By: Alexander Bokovoy

Add OTP sync support to ipa-pwd-extop

2014-02-21T09:26:02+00:00

Reviewed-By: Alexander Bokovoy

Add OTP last token plugin

2014-02-21T09:26:02+00:00

This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.

Reviewed-By: Alexander Bokovoy

Add HOTP support

2014-02-21T09:26:02+00:00

Reviewed-By: Alexander Bokovoy

Add support to ipa-kdb for keyless principals

2014-02-19T09:15:36+00:00

https://fedorahosted.org/freeipa/ticket/3779

Reviewed-By: Alexander Bokovoy

Add libotp internal library for slapi plugins

2014-02-14T15:03:25+00:00

Reviewed-By: Alexander Bokovoy

Enable building in C99 mode

2014-02-14T15:03:24+00:00

C99 is supported on all compilers we target and
provides some useful features, including:
  * Standard struct initializers
  * Compound literals
  * For-loop declarations
  * Standard bool type
  * Variable arrays (use with caution)
  * Too many others to mention...

Reviewed-By: Alexander Bokovoy

ipa-kdb: validate that an OTP user has tokens

2014-02-14T15:03:24+00:00

This handles the case where a user is configured for OTP in ipaUserAuthType,
but the user has not yet created any tokens. Until the user creates tokens,
the user should still be able to log in via password. This logic already
exists in LDAP, but ipa-kdb needs to perform the same validation to know
what data to return to the KDC.

https://fedorahosted.org/freeipa/ticket/4154

Reviewed-By: Alexander Bokovoy

Move ipa-otpd socket directory

2014-02-11T16:36:19+00:00

https://fedorahosted.org/freeipa/ticket/4167
Reviewed-By: Martin Kosek