Quanah Gibson-Mount pushed to branch master at openldap / OpenLDAP


Commits:
8d04c2bd by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#9437 Enable test081 in CI

- - - - -
a480eae0 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#10169 Do not leak opattr mods

- - - - -
1414325c by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#10379 Use a fresh timestamp for internal mod

- - - - -
e0cca3fc by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#10313 Tighten counter tracking modification

Try to make sure the counter/timer value we used hasn't been used up in
the meantime. Also if the update cannot be committed, do not say whether
the provided OTP was correct, this would open up an oracle for malicious
clients to brute force a token they could use later/elsewhere.

- - - - -
6a28e891 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#10313 Allow counter mods to be chained

- - - - -
bbe436d0 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00
ITS#10313 Add a chaining test

- - - - -


3 changed files:

- .gitlab-ci.yml
- servers/slapd/overlays/otp.c
- tests/scripts/test080-hotp


View it on GitLab: 
https://git.openldap.org/openldap/openldap/-/compare/b0f486e72efe8e9d7fb67329bf784195973768d1...bbe436d012638fe9205f08b5a66e948fbbba1fd3

-- 
View it on GitLab: 
https://git.openldap.org/openldap/openldap/-/compare/b0f486e72efe8e9d7fb67329bf784195973768d1...bbe436d012638fe9205f08b5a66e948fbbba1fd3
You're receiving this email because of your account on git.openldap.org.


Reply via email to