Re: [Cosign-discuss] Conditional Factors

2013-01-22 Thread Mark Montague
On January 22, 2013 4:55 , Florian Mueller wrote: > Yes, I did configured the factor as secondary (-2) but the problem was > that I didn't know how to enable factors only for specific users > instead of services. In our environment the user should be able to > decide whether he wants to use Goo

Re: [Cosign-discuss] Conditional Factors

2013-01-22 Thread Florian Mueller
> > > 1) Is there any way to bypass the logout verification screen? I really > don't need verification when I redirect > > the user from a service logout script to central logout. > > Not at the moment, no. Please file a feature request on the cosign tracker: > > http://p.sf.net/cosign/trac

Re: [Cosign-discuss] Conditional Factors

2013-01-22 Thread Florian Mueller
* > > -- > > Steve Bennett, Lancaster University**** > > ** ** > > *From:* Florian Mueller [mailto:flo2muel...@gmail.com] > *Sent:* 08 January 2013 12:03 > *To:* cosign-discuss@lists.sourceforge.net > *Subject:* [Cosign-discuss] Conditional Factors > &

Re: [Cosign-discuss] Conditional Factors

2013-01-17 Thread Andrew Mortensen
On Jan 9, 2013, at 5:33 AM, Florian Mueller wrote: > ...Maybe you find the time to answer three more questions? > > 1) Is there any way to bypass the logout verification screen? I really don't > need verification when I redirect > the user from a service logout script to central logout. Not a

Re: [Cosign-discuss] Conditional Factors

2013-01-10 Thread Bennett, Steve
an Mueller [mailto:flo2muel...@gmail.com] Sent: 08 January 2013 12:03 To: cosign-discuss@lists.sourceforge.net Subject: [Cosign-discuss] Conditional Factors Hi all, I have set up kerberos and cosign to work correctly with username and password. Now I'd like to setup two-factor authenticatio

Re: [Cosign-discuss] Conditional Factors

2013-01-09 Thread Florian Mueller
Hi Andrew Thanks for your answer. As a matter of fact I had no idea that cosign caches already satisfied factors. With that knowledge and some changes in cosign.js it's possible to implement the desired behavior. My google-auth factor exits with status OK when authenticated user has no google aut

Re: [Cosign-discuss] Conditional Factors

2013-01-08 Thread Andrew Mortensen
Hi Florian. You're right: what you describe is currently not possible in cosign. That doesn't mean it won't be, though. As a matter of fact, there's work underway at a university to add a feature to cosign that matches your scenario almost exactly. There's a chance this will be available in the

[Cosign-discuss] Conditional Factors

2013-01-08 Thread Florian Mueller
Hi all, I have set up kerberos and cosign to work correctly with username and password. Now I'd like to setup two-factor authentication using google authenticator. The setup should be like this: 1) User is presented a login page with just username & password on it 2) User enters correct credenti