Skip to content
#

otp

Here are 628 public repositories matching this topic...

frostschutz
frostschutz commented Apr 25, 2020

Yahoo Japan supports one time passwords using their own app. Their info page about it: https://id.yahoo.co.jp/security/otp.html

andOTP did not recognize their QR code. It's encoded as:

yjotp://totp/username?secret=################################

Also tried copy-paste but that resulted in wrong values; I might have done something wrong.

andOTP produces the correct values when enter

freeradius-server
arr2036
arr2036 commented Oct 30, 2019

Issue type

  • Defect - Unexpected behaviour (obvious or verified by project member).

Defect

How to reproduce the issue

When querying a non-cached group membership by name, debug output states that the object the user is a member of was the parent of the group object.

if (&LDAP-Group == 'my-group') {
   # success
}

Will emit a debug message similar to `ou=groups,dc=e

SunnyRichards
SunnyRichards commented Apr 13, 2018

Hi,

I am using lager (tag 3.2.1), with the version of ranch (1.2.1 ) I noticed that error_lager_lager_h crashes with a case clause of the form:

error_logger_lager_h exited with reason

{'EXIT',{{case_clause,[Ref,{ack,<0.3770.0>,{error,normal}}]}, -- Ranch CRASH EVENT (2 params)

[{error_logger_lager_h,log_event,2[{file,"/home/ubuntu/transecur/_build/default/lib/lager/src/error_logge

jidanni
jidanni commented Apr 10, 2020

When editing a profile with a long
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
key, push the eyeball button. You will see
AAAAAAAAAAAAAAAAAAAAAAAAA [EYEBALL]
It is missing the ellipsis,
AAAAAAAAAAAAAAAAAAAAAAAAA… [EYEBALL]
Without the ellipsis we assume the string is only as long as it looks.

cornelinux
cornelinux commented Apr 4, 2020

It might be useful to have a generic system for documenting anything within PrivacyIDEA. However that is a rather large undertaking.

See: #1814

We could have a table for documentation and then add links in this table where it links to.
But the questions would be

  • where display the documentation
  • to whom display the documention?
    • for users?
    • for admins?
Dragon988
Dragon988 commented Apr 20, 2020

When using TOTP the user password should -always- go to the TOTP app, even if wrong.

It should not say "wrong password" prior to the TOTP app for security reasons. This app should not let the attacker know they have the correct password!

Current behavior:

Attempt login - wrong password - error
Attempt login - correct password - totp - error | This lets the attacker know the password is c

Improve this page

Add a description, image, and links to the otp topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the otp topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.