Mark Reynolds 9ab6601c31 Do not let user with an expired OTP token to log in if only OTP is allowed ...

If only OTP authentication is allowed, and a user tries to login with an
expired token, do not let them log in with their password. Forcing the
admin to intervene. If the user does not have an OTP token then allow
them to log in with a password until an OTP token is configured

Fixes: https://pagure.io/freeipa/issue/9387

Signed-off-by: Mark Reynolds <mreynolds@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Julien Rische <jrische@redhat.com>

2024-10-09 09:48:16 +02:00

..

dnssec

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

ipa-kdb

Do not let user with an expired OTP token to log in if only OTP is allowed

2024-10-09 09:48:16 +02:00

ipa-otpd

Fix some resource leaks identified by a static analyzer

2024-08-15 10:10:34 +02:00

ipa-sam

ipasam: make krbtgt TDO principal canonical

2024-01-23 13:19:37 +01:00

ipa-slapi-plugins

Do not let user with an expired OTP token to log in if only OTP is allowed

2024-10-09 09:48:16 +02:00

ipa-version.h.in

Build: move version handling from Makefile to configure

2016-11-09 13:08:32 +01:00

Makefile.am

build: Unify compiler warning flags used

2021-01-15 14:11:56 +01:00