[SSSD] [PATCH] krb5: do not send SSS_OTP if two factors were used

Jakub Hrozek jhrozek at redhat.com
Tue Jul 28 18:51:44 UTC 2015


On Thu, Jul 23, 2015 at 05:20:17PM +0200, Sumit Bose wrote:
> Hi,
> 
> This patch fixes an issue with two factor authentication. When the user
> is prompted to enter long term password (first factor) and one-time
> component (second factor) separately the first component may remain on
> the PAM stack so that other modules can use the long term password.
> 
> bye,
> Sumit
> 

ACK.



More information about the sssd-devel mailing list