diff options
| author | Nathaniel McCallum <npmccallum@redhat.com> | 2013-12-16 16:19:08 -0500 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-02-21 10:26:02 +0100 |
| commit | 49038cda9fcddf75e04d1e36df3707432b96fb6d (patch) | |
| tree | a7c38748dbfea8dd311e88aff805a266d7fcef64 /freeipa.spec.in | |
| parent | abb63ed9d1027b967b4ac4473433e4eb5a3ff0b9 (diff) | |
| download | freeipa.git-49038cda9fcddf75e04d1e36df3707432b96fb6d.tar.gz freeipa.git-49038cda9fcddf75e04d1e36df3707432b96fb6d.tar.xz freeipa.git-49038cda9fcddf75e04d1e36df3707432b96fb6d.zip | |
Add OTP last token plugin
This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.
Thanks to Mark Reynolds for helping me with this patch.
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index bbceca37..e851313f 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -396,6 +396,7 @@ rm %{buildroot}/%{plugin_dir}/libipa_sidgen.la rm %{buildroot}/%{plugin_dir}/libipa_sidgen_task.la rm %{buildroot}/%{plugin_dir}/libipa_extdom_extop.la rm %{buildroot}/%{plugin_dir}/libipa_range_check.la +rm %{buildroot}/%{plugin_dir}/libipa_otp_lasttoken.la rm %{buildroot}/%{_libdir}/krb5/plugins/kdb/ipadb.la rm %{buildroot}/%{_libdir}/samba/pdb/ipasam.la @@ -742,6 +743,7 @@ fi %attr(755,root,root) %{plugin_dir}/libipa_cldap.so %attr(755,root,root) %{plugin_dir}/libipa_dns.so %attr(755,root,root) %{plugin_dir}/libipa_range_check.so +%attr(755,root,root) %{plugin_dir}/libipa_otp_lasttoken.so %dir %{_localstatedir}/lib/ipa %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/backup %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore |