Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

GSoC 2013 application bugfix: totp offset and replay logging #1

Merged
merged 1 commit into from Apr 29, 2013

Conversation

Projects
None yet
2 participants
Contributor

Fabian-Gruenbichler commented Apr 29, 2013

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705939

Sample output for replayed OTP values:

Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: new incoming connection
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: attempting DYNALOGIN auth for user=testuser
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: user = testuser, count = 45574687
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: Token replay detected, denying authentication
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: updated data: user = testuser, count = 45574687
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: DYNALOGIN denied for user=testuser
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: client connection closed

Sample output for offset logging:

Apr 29 15:04:03 debian /usr/sbin/dynalogind[11386]: new incoming connection
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: attempting DYNALOGIN auth for user=testuser
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: user = testuser, count = 45574687
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: TOTP validation returned offset 2 (~60 seconds ahead)
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: updated data: user = testuser, count = 45574691
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: DYNALOGIN success for user=testuser
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: client connection closed

dpocock added a commit that referenced this pull request Apr 29, 2013

@dpocock dpocock merged commit 49ea7de into dynalogin:master Apr 29, 2013

Owner

dpocock commented Apr 29, 2013

Thanks for this contribution, I am adding you to the list of contributors

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment