Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-19 Thread Nathaniel McCallum
On Thu, 2014-09-18 at 14:20 -0400, Simo Sorce wrote: > On Thu, 18 Sep 2014 13:59:34 -0400 > Nathaniel McCallum wrote: > > > On Thu, 2014-09-18 at 14:00 +0200, Petr Vobornik wrote: > > > On 15.9.2014 21:08, Nathaniel McCallum wrote: > > > > On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wro

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-18 Thread Simo Sorce
On Thu, 18 Sep 2014 13:59:34 -0400 Nathaniel McCallum wrote: > On Thu, 2014-09-18 at 14:00 +0200, Petr Vobornik wrote: > > On 15.9.2014 21:08, Nathaniel McCallum wrote: > > > On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: > > >> This prevents any local attempt at rapid token code re

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-18 Thread Nathaniel McCallum
On Thu, 2014-09-18 at 14:00 +0200, Petr Vobornik wrote: > On 15.9.2014 21:08, Nathaniel McCallum wrote: > > On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: > >> This prevents any local attempt at rapid token code replay. If two > >> token codes hit the system at roughly the same moment

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-18 Thread Petr Vobornik
On 15.9.2014 21:08, Nathaniel McCallum wrote: On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: This prevents any local attempt at rapid token code replay. If two token codes hit the system at roughly the same moment, only the first write will succeed. All subsequent authentications w

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-15 Thread Nathaniel McCallum
On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: > This prevents any local attempt at rapid token code replay. If two > token codes hit the system at roughly the same moment, only the > first write will succeed. All subsequent authentications will fail. > > This obviates the need for a

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-08-29 Thread Simo Sorce
On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: > This prevents any local attempt at rapid token code replay. If two > token codes hit the system at roughly the same moment, only the > first write will succeed. All subsequent authentications will fail. > > This obviates the need for a

[Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-08-28 Thread Nathaniel McCallum
This prevents any local attempt at rapid token code replay. If two token codes hit the system at roughly the same moment, only the first write will succeed. All subsequent authentications will fail. This obviates the need for an OTP authentication lock. https://fedorahosted.org/freeipa/ticket/449