mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
49038cda9f
This plugin prevents the deletion or deactivation of the last valid token for a user. This prevents the user from migrating back to single factor authentication once OTP has been enabled. Thanks to Mark Reynolds for helping me with this patch. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
16 lines
500 B
Plaintext
16 lines
500 B
Plaintext
dn: cn=IPA OTP Last Token,cn=plugins,cn=config
|
|
changetype: add
|
|
objectclass: top
|
|
objectclass: nsSlapdPlugin
|
|
objectclass: extensibleObject
|
|
cn: IPA OTP Last Token
|
|
nsslapd-pluginpath: libipa_otp_lasttoken
|
|
nsslapd-plugininitfunc: ipa_otp_lasttoken_init
|
|
nsslapd-plugintype: preoperation
|
|
nsslapd-pluginenabled: on
|
|
nsslapd-pluginid: ipa-otp-lasttoken
|
|
nsslapd-pluginversion: 1.0
|
|
nsslapd-pluginvendor: Red Hat, Inc.
|
|
nsslapd-plugindescription: IPA OTP Last Token plugin
|
|
nsslapd-plugin-depends-on-type: database
|