diff options
| author | Russ Allbery <rra@stanford.edu> | 2011-08-03 11:25:58 -0700 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2011-08-03 11:31:35 -0700 |
| commit | 0eef6a850df7fb865506dcf99f3be72452a419a7 (patch) | |
| tree | 00a02c133fe6ea1c1d9fa3bd61d251ea2a57be55 /.gitignore | |
| parent | bea500204c21ff8f530693209cc649ee6e377b50 (diff) | |
Add mod_webkdc support for user metadata and multifactor
Add support for querying for user metadata if so configured. Add
support for fulfilling multifactor requirements and tracking the
initial factors through multiple webkdc-proxy tokens into the tokens
generated for the WAS. Add support for rejecting logins with
multifactor required or multifactor unavailable based on the user's
configuration and the requests from the WAS.
This provides the core of basic multifactor support except that it
provides no way of getting webkdc-proxy tokens with the appropriate
factors. That will be coming in a subsequent change.
Most of the login code is moved into the libwebauth library, but there
are a lot of remnants still left behind in mod_webkdc that will need
to move later, and therefore a lot of duplicate code.
Change-Id: I4d10a121472d93caa8e00e5b755949f862e71f82
Reviewed-on: https://gerrit.stanford.edu/118
Tested-by: Russ Allbery <rra@stanford.edu>
Reviewed-by: Russ Allbery <rra@stanford.edu>
Diffstat (limited to '.gitignore')
| -rw-r--r-- | .gitignore | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -51,6 +51,7 @@ /tests/lib/token-encode-t /tests/lib/token-t /tests/lib/webkdc-info-t +/tests/lib/webkdc-login-t /tests/portable/asprintf-t /tests/portable/snprintf-t /tests/portable/mkstemp-t |