[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Experimenting with a password plugin
- To: Michael Ströder <michael@stroeder.com>, openldap-technical@openldap.org
- Subject: Re: Experimenting with a password plugin
- From: dee heffem <dheffem@gmail.com>
- Date: Fri, 29 Mar 2019 09:23:23 -0500
- Content-language: en-US
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=TPyLVLrCHfut+8OEGRLEd6tgLINMb7AbvU5lVgM6Iq4=; b=t54iQcYrfE4RdJnqmTMGgxtNetOhejmZ8pYm2asx/KMBSqFfa2BrhH+BDQRwGaFhGP j+5fhkNaf7uazjOvIOYYN8uCzoibsdYz2jHGqQf5RM7GnuLBS1NTFRW7rqZfK1OCFXew m0pX19JecipRh6FkrZzDWuMk2sSvf/1pRBdsDGVvbb6+rRPw0wOMA2Km85/zpdvZEKD3 ASPkHaHtJtpqJXd2Y3FJL/egNrqZTh2KdUNqv8raxWgjaG0u5tnBdQ1NP96C297a91TN AFkR2QKOiyggr9IRMAdf+J07iHgYA4wgRPZt0ASBMFl6wkiTpjgf6sIM3zk2NYfkQWDV 4XGw==
- In-reply-to: <c8d09ffd-c6a6-f005-851e-558337fdbebd@stroeder.com>
- References: <011fc6df-bb4f-a821-7122-a9e8ea750205@gmail.com> <c8d09ffd-c6a6-f005-851e-558337fdbebd@stroeder.com>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.0
On 3/29/19 4:26 AM, Michael Ströder wrote:
<snip>
>
> You want to implement something like this?
>
> https://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=tree;f=contrib/slapd-modules/passwd/totp
Quite similar, but using Cisco Duo. Requires the "user" attribute to be
passed to the API function call (eg: duo_auth_preauth(duo, user) )
https://github.com/duosecurity/libduo/blob/master/test-duologin.c
Quickly looking over the link you provided.. Line 442 (find_attr)
seems to be what I need. Other than the OpenLDAP source code, is there
developer documentation available on these C functions? I've only been
able to turn up Admin docs.
Thanks