mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
79df668b5d
Before this patch users could log in using only the OTP value. This arose because ipapwd_authentication() successfully determined that an empty password was invalid, but 389 itself would see this as an anonymous bind. An anonymous bind would never even get this far in this code, so we simply deny requests with empty passwords. This patch resolves CVE-2014-7828. https://fedorahosted.org/freeipa/ticket/4690 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> |
||
|---|---|---|
| .. | ||
| common | ||
| ipa-cldap | ||
| ipa-dns | ||
| ipa-enrollment | ||
| ipa-extdom-extop | ||
| ipa-lockout | ||
| ipa-modrdn | ||
| ipa-otp-counter | ||
| ipa-otp-lasttoken | ||
| ipa-pwd-extop | ||
| ipa-range-check | ||
| ipa-sidgen | ||
| ipa-uuid | ||
| ipa-version | ||
| ipa-winsync | ||
| libotp | ||
| Makefile.am | ||
| README | ||