Activity
From 21 January 2015 to 19 February 2015
08 February 2015
- 17:22 Fehler #40 (Erledigt): disable clients does not work
- 16:04 Fehler #40 (Erledigt): disable clients does not work
- all 0.1 beta an -rc releases misses this feature. will be fixed soon.
- 16:14 Feature #41 (In Bearbeitung): Add daemon mode to OTPme
- we need this for many features including cluster support.
06 February 2015
03 February 2015
- 21:43 Feature #22 (Erledigt): add option to force CTP usage
- 19:24 Feature #39 (Neu): add cluster support to OTPme
- it should be possible to cluster OTPme (failover and load balancing). using a concept similar to ganeti would be grea...
- 19:08 Feature #38 (Erledigt): add support for push-token (e.g. sms)
- there should be a token type, with a static password, that will generate an OTP for the user and send it via SMS.
* ...
02 February 2015
- 21:34 Feature #37 (Neu): implement support for different hash types for CTP generation in roundcube plugin
- the roundcube plugin should support different hash types for CTP generation which was added to OTPme (see parent ticket)
- 21:01 Feature #19 (Erledigt): following logout requests should not be counted as failed login
- 18:37 Feature #18 (Erledigt): add user authorization script
- added documentation to the wiki
- 18:37 Feature #17 (Erledigt): add token type that will call an external script for user authentication
- added documentation to the wiki
- 17:59 Feature #30 (Erledigt): add option to configure hash type for CTP and SLP generation
- 17:58 Feature #30 (Gelöst): add option to configure hash type for CTP and SLP generation
- 17:58 Feature #30: add option to configure hash type for CTP and SLP generation
- implemented for CTPs now. SLP is less important but may follow later...
01 February 2015
- 20:54 Fehler #36 (Erledigt): setting group max_fail should disable locking
- 20:43 Fehler #36 (Erledigt): setting group max_fail should disable locking
- current behavior: when max_fail is set to 0 users are always locked for this group
desired behavior: when max_fail i... - 20:40 Fehler #35 (Erledigt): session timeout pass on is not done recursive
- 20:22 Fehler #35: session timeout pass on is not done recursive
- setting timeout to "0" should result in using default timeout values from main config
- 20:20 Fehler #35 (Erledigt): session timeout pass on is not done recursive
- session timeouts are only passed on to direct child sessions and not recursive.
- 00:50 Feature #32 (Erledigt): add sample config for openldap
31 January 2015
- 22:15 Fehler #34 (Erledigt): setting user description does not work
- 22:14 Fehler #34 (Erledigt): setting user description does not work
- otpme-user description admin "admin"
NameError: name 'get_val' is not defined
30 January 2015
28 January 2015
- 20:45 Feature #33 (In Bearbeitung): implement module to be used with freeradius rlm_python
- 18:52 Feature #33 (Erledigt): implement module to be used with freeradius rlm_python
- 19:01 Feature #9: add -f option to disable any user question for cli tools
- The 2nd wrote:
> cli tools should have a force (-f) option to disable user confirmation (needed for scripts)
this...
25 January 2015
- 20:38 Feature #33: implement module to be used with freeradius rlm_python
- this is now implemented for clear-text requests. ntlm/mschap request handling will follow until i got an answer from ...
- 19:18 Feature #33 (Erledigt): implement module to be used with freeradius rlm_python
- using a python module should perform better than calling otpme as a script via "exec" modul.
there are examples av... - 01:07 Feature #32 (Erledigt): add sample config for openldap
- slapd can authenticate users via saslauthd.
* user password needs to be set to "{SASL}username" (e.g. {SASL}joe)
... - 00:53 Feature #18: add user authorization script
- need documentation
24 January 2015
- 20:18 Feature #31 (Erledigt): child sessions should be identifiable via "otpme-session show"
- * indent child session names
* mark parent session ids with a tailing asterisk - 19:02 Feature #5 (Erledigt): child sessions should not inherit timeout values
- 15:56 Feature #30 (Erledigt): add option to configure hash type for CTP and SLP generation
- this should improve protection against dictionary attacks if someone was able to keylogg/sniff both, the OTP and the ...
- 14:51 Feature #10 (Erledigt): implement otpme-token show
- 14:49 Feature #29 (Neu): add support for mod_auth_pubtkt
see https://neon1.net/mod_auth_pubtkt/ for infos
* generate login page with python?
** add support for CTP and ...- 14:46 Feature #28 (Neu): add phpmyadmin sample config
- https://wiki.phpmyadmin.net/pma/Auth_types
* auth_type signon looks promising
** use e.g. mod_auth_radius for aut... - 14:35 Feature #27 (Neu): add sample config for mysql using pam_radius
- http://dev.mysql.com/doc/refman/5.5/en/pam-authentication-plugin.html
- 14:32 Feature #26 (Neu): add sample config for openvpn authentication
- - use radius to pass credentials to OTPme?
- openvpn plugin exists but unmaintained?
- writing a auth script should... - 00:20 Feature #24 (Erledigt): add bash completion for OTPme commands
23 January 2015
- 23:28 Feature #25 (In Bearbeitung): add "force token type" to groups
- we should be able to force specific token types per group to prevent an admin from adding a token with the wrong type...
- 18:33 Feature #24 (Erledigt): add bash completion for OTPme commands
- command completion is a must for cool projects ;)
- 00:01 Feature #18: add user authorization script
- need to implement per user authorization script....
22 January 2015
- 22:12 Feature #23 (Erledigt): modify log_passwords feature for logging of all auth infos (e.g. challenge/response)
- 19:59 Feature #23 (Erledigt): modify log_passwords feature for logging of all auth infos (e.g. challenge/response)
- valid auth info variables:
- password
- otp
- trust password
- otp that was used to generate the trust password
... - 19:39 Feature #17: add token type that will call an external script for user authentication
- implemented but needs testing and docu...
21 January 2015
- 23:58 Feature #22 (Erledigt): add option to force CTP usage
- - per client
- and per group?
Also available in: Atom