Re: [Freeipa-devel] OTP Sync Client Design

2014-05-27 Thread Jan Cholasta
On 26.5.2014 18:23, Nathaniel McCallum wrote: On Mon, 2014-05-26 at 09:56 +0200, Jan Cholasta wrote: On 23.5.2014 23:19, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user o

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-26 Thread Nathaniel McCallum
On Mon, 2014-05-26 at 09:56 +0200, Jan Cholasta wrote: > On 23.5.2014 23:19, Nathaniel McCallum wrote: > > On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: > >> Occasionally OTP tokens get out of sync with the server. When this > >> happens, the user or an admin need to synchronize the

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-26 Thread Petr Vobornik
On 26.5.2014 09:41, Martin Kosek wrote: On 05/23/2014 11:19 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-26 Thread Jan Cholasta
On 23.5.2014 23:19, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we landed server-side synchronization support, w

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-26 Thread Martin Kosek
On 05/23/2014 11:19 PM, Nathaniel McCallum wrote: > On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: >> Occasionally OTP tokens get out of sync with the server. When this >> happens, the user or an admin need to synchronize the token. To this >> end, we landed server-side synchronizatio

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-23 Thread Nathaniel McCallum
On Wed, 2014-05-14 at 14:08 -0400, Nathaniel McCallum wrote: > Occasionally OTP tokens get out of sync with the server. When this > happens, the user or an admin need to synchronize the token. To this > end, we landed server-side synchronization support, which is a simple > bind with a custom contr

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-15 Thread Jakub Hrozek
On Wed, May 14, 2014 at 05:23:34PM -0400, Nathaniel McCallum wrote: > > IMO SSSD should probably have a way to sync the token. > > From usability point of view it should be a part of the standard stock > > client software, not a part of the IPA client or ipa tools. > > It should probably have a go

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-15 Thread Petr Vobornik
On 15.5.2014 00:23, Dmitri Pal wrote: On 05/14/2014 05:49 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 17:35 -0400, Dmitri Pal wrote: On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote:

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-15 Thread Petr Vobornik
On 15.5.2014 09:52, Simo Sorce wrote: - Original Message - Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we landed server-side synchronization support, which is a simple bind with a custom co

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-15 Thread Simo Sorce
- Original Message - > Occasionally OTP tokens get out of sync with the server. When this > happens, the user or an admin need to synchronize the token. To this > end, we landed server-side synchronization support, which is a simple > bind with a custom control. This all works with my sam

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Dmitri Pal
On 05/14/2014 05:49 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 17:35 -0400, Dmitri Pal wrote: On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sy

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
On Wed, 2014-05-14 at 17:35 -0400, Dmitri Pal wrote: > On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: > > On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: > >> On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: > >>> Occasionally OTP tokens get out of sync with the server. When this > >>> hap

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Dmitri Pal
On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, w

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: > On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: > > Occasionally OTP tokens get out of sync with the server. When this > > happens, the user or an admin need to synchronize the token. To this > > end, we landed server-side synchronization sup

[Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we landed server-side synchronization support, which is a simple bind with a custom control. This all works with my sample test script. Client support is pro