Re: [Freeipa-users] FreeOTP

https://bodhi.fedoraproject.org/updates/FEDORA-2016-0b966047e1 Please test and provide your feedback. On Wed, 2016-06-22 at 13:21 +0200, Winfried de Heiden wrote: > Hi all, > Great news, can't wait for it to be available in Fedora ARM en test. > Winny > > Op 21-06-16 om 22:23 schreef Nathaniel

Re: [Freeipa-users] FreeOTP

Hi all, Great news, can't wait for it to be available in Fedora ARM en test. Winny Op 21-06-16 om 22:23 schreef Nathaniel McCallum: I have found and fixed what I believe to be the issue. I have submitted a patch upstream for review: 

Re: [Freeipa-users] FreeOTP

I have found and fixed what I believe to be the issue. I have submitted a patch upstream for review: https://github.com/krb5/krb5/pull/471 Once merged, we will backport the fix into all existing Fedora releases. So you should get an update via a simple: dnf update. On Thu, 2016-06-16 at 10:28

Re: [Freeipa-users] FreeOTP

On Thu, Jun 16, 2016 at 10:28:41AM +0200, Winfried de Heiden wrote: > Hi all, > > "So it looks a bit like a libverto 32bit issue"; any news or progress on > this? Bugzilla? sorry for the delay, but I'm currently busy with other items. I can come back to you on this issue early next week. Btw,

Re: [Freeipa-users] FreeOTP

Hi all, "So it looks a bit like a libverto 32bit issue"; any news or progress on this? Bugzilla? Winny Op 09-06-16 om 18:51 schreef Sumit Bose: On Thu, Jun 09, 2016 at 08:42:59AM -0400, Nathaniel McCallum wrote: On Thu, 2016-06-09 at 10:46 +0200, Sumit Bose wrote: On Thu, Jun 09, 2016 at

Re: [Freeipa-users] FreeOTP

Hi all, I agree on it's look like a 32 bit issue. Trying to reproduce on Fedora 64 bit; no problems Trying to reproduce on Fedora 23 32 bit (x886): [root@freeipa ~]# journalctl -l -u ipa-otpd@0-6397-0.service -- Logs begin at vr

Re: [Freeipa-users] FreeOTP

On Thu, Jun 09, 2016 at 08:42:59AM -0400, Nathaniel McCallum wrote: > On Thu, 2016-06-09 at 10:46 +0200, Sumit Bose wrote: > > On Thu, Jun 09, 2016 at 08:16:13AM +0200, Winfried de Heiden wrote: > > > Hi all, > > > > > > I can install libvert-libev but removing libverto-tevent will > > > remove

Re: [Freeipa-users] FreeOTP

On Thu, 2016-06-09 at 10:46 +0200, Sumit Bose wrote: > On Thu, Jun 09, 2016 at 08:16:13AM +0200, Winfried de Heiden wrote: > > Hi all, > > > > I can install libvert-libev but removing libverto-tevent will > > remove 123 > > dependencies also. (wget, tomcat and much more...) > > > > Hence, I

Re: [Freeipa-users] FreeOTP

On Thu, Jun 09, 2016 at 08:16:13AM +0200, Winfried de Heiden wrote: > Hi all, > > I can install libvert-libev but removing libverto-tevent will remove 123 > dependencies also. (wget, tomcat and much more...) > > Hence, I installed libverto-libev, but dit not remove libverto-tevent to give > it a

Re: [Freeipa-users] FreeOTP

Hi all, I can install libvert-libev but removing libverto-tevent will remove 123 dependencies also. (wget, tomcat and much more...) Hence, I installed libverto-libev, but dit not remove libverto-tevent to give it a try. After ipactl restart still

Re: [Freeipa-users] FreeOTP

Can you please try:   # dnf install libverto-libev   # dnf remove libverto-tevent   # ipactl restart On Wed, 2016-06-08 at 18:30 +0200, Winfried de Heiden wrote: > Well, here your are: > rpm -qa 'libverto*' 'krb5*' > krb5-pkinit-1.14.1-6.fc23.armv7hl > libverto-tevent-0.2.6-5.fc23.armv7hl >

Re: [Freeipa-users] FreeOTP

Well, here your are: rpm -qa 'libverto*' 'krb5*' krb5-pkinit-1.14.1-6.fc23.armv7hl libverto-tevent-0.2.6-5.fc23.armv7hl krb5-libs-1.14.1-6.fc23.armv7hl krb5-workstation-1.14.1-6.fc23.armv7hl libverto-0.2.6-5.fc23.armv7hl

Re: [Freeipa-users] FreeOTP

No, we need to know what libverto *backend* you are using. Please provide the output from this command: rpm -qa 'libverto*' 'krb5*' On Wed, 2016-06-08 at 08:34 +0200, Winfried de Heiden wrote: > Hi all, > > > Well, the libverto is there some time allready (yep, it's running on > a Bananapi!),

Re: [Freeipa-users] FreeOTP

The libverto used on RHEL 7.2 (itś working there) is v0.2.5-4 build date January 26 2014, so that's an older one. Is this more recent one causing the problems? How to test? Winny Op 08-06-16 om 08:34 schreef

Re: [Freeipa-users] FreeOTP

Hi all, Well, the libverto is there some time allready (yep, it's running on a Bananapi!), doesn't feel like a recent update, so a Name    : libverto Version : 0.2.6 Release : 5.fc23 Architecture: armv7hl

Re: [Freeipa-users] FreeOTP

No, neither HOTP works... Op 07-06-16 om 17:09 schreef Prashant Bapat: Do HOTP tokens work fine ? On 7 June 2016 at 20:37, Winfried de Heiden wrote:

Re: [Freeipa-users] FreeOTP

Do HOTP tokens work fine ? On 7 June 2016 at 20:37, Winfried de Heiden wrote: > Hi all, > > > Yes I check that one also. The IPA-server is running ntp and is is sync. > The FreeOTP app is running on my phone which is synced by network, all > looks fine > > > Forgot to mention;

Re: [Freeipa-users] FreeOTP

Hi all, Yes I check that one also. The IPA-server is running ntp and is is sync. The FreeOTP app is running on my phone which is synced by network, all looks fine Forgot to mention; this IPA-server is running on Fedora ARM on a

Re: [Freeipa-users] FreeOTP

​If this is TOTP (time based) you want to double check the time is properly set in both the server (NTP) and the device that is generating the OTP tokens. I have had issues with this with my users couple of times. ​ On 7 June 2016 at 19:43, Alexander Bokovoy wrote: > On

Re: [Freeipa-users] FreeOTP

On Tue, 07 Jun 2016, Winfried de Heiden wrote: Hi all, I tried the FreeIPA webUI, ssh and "su - otpuser", all the same result. Ok. Jun 07 14:44:37 ipa.blabla.bla krb5kdc[5887](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.251: NEEDED_PREAUTH:

Re: [Freeipa-users] FreeOTP

Hi all, I tried the FreeIPA webUI, ssh and "su - otpuser", all the same result. Winny Op 07-06-16 om 15:02 schreef Alexander Bokovoy: On Tue, 07 Jun 2016, Winfried de Heiden wrote: Hi all, I am

Re: [Freeipa-users] FreeOTP

On Tue, 07 Jun 2016, Winfried de Heiden wrote: Hi all, I am trying to setup Freeipa with otp using the freeotp app. All looks fine, adding the user to the FreeOTP app also works fine. The users looks like: ipa user-show otpuser   User login: otpuser   First name: otp   Last name: user   Home

[Freeipa-users] FreeOTP

Hi all, I am trying to setup Freeipa with otp using the freeotp app. All looks fine, adding the user to the FreeOTP app also works fine. The users looks like: ipa user-show otpuser   User login: otpuser   First name: otp   Last