[SSSD] [PATCHES] Add special PAM prompting for 2FA authentication
Sumit Bose
sbose at redhat.com
Thu Apr 30 07:19:17 UTC 2015
On Wed, Apr 29, 2015 at 06:54:43PM +0200, Jakub Hrozek wrote:
> On Wed, Apr 22, 2015 at 10:24:25AM +0200, Sumit Bose wrote:
> > +errno_t sss_auth_pack_2fa_blob(const char *fa1, size_t fa1_len,
> > + const char *fa2, size_t fa2_len,
> > + uint8_t *buf, size_t buf_len,
> > + size_t *_2fa_blob_len)
>
> Lukas would like to finish the review, so I'll just send the main
> question I had since I read the patches as well -- is it wise to use
> const char* here and not uint8_t? Are we sure there can't be NULL
> characters in either factors? If yes, then I guess it would make sense
> to use uint8_t...
Since both factors has to be entered at PAM password prompts I think we
can be sure that they are real strings.
bye,
Sumit
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list