Quanah Gibson-Mount pushed to branch master at openldap / OpenLDAP
Commits: 8d04c2bd by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#9437 Enable test081 in CI
- - - - - a480eae0 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#10169 Do not leak opattr mods
- - - - - 1414325c by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#10379 Use a fresh timestamp for internal mod
- - - - - e0cca3fc by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#10313 Tighten counter tracking modification
Try to make sure the counter/timer value we used hasn't been used up in the meantime. Also if the update cannot be committed, do not say whether the provided OTP was correct, this would open up an oracle for malicious clients to brute force a token they could use later/elsewhere.
- - - - - 6a28e891 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#10313 Allow counter mods to be chained
- - - - - bbe436d0 by Ondřej Kuzník at 2025-10-21T03:15:43+00:00 ITS#10313 Add a chaining test
- - - - -
3 changed files:
- .gitlab-ci.yml - servers/slapd/overlays/otp.c - tests/scripts/test080-hotp
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/b0f486e72efe8e9d7fb6732...