freeipa

#6368 otpd doesn't properly handle closing of ldap connection
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

E.g when nsslapd-idletimeout is set.

Result: 2FA stops working

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1377858 (Red Hat Enterprise Linux 7)

mbasti: missing index for attributes listed bellow

  • description <--- index (+substring)
  • l (location?) <---index
  • nsOsVersion <--- remove from default search
  • nsHardwarePlatform <--------- remove...
  • nsHostLocation <-------- remove...

Please ignore comment 2. It was meant for #6371

ipa-4-4:

  • 304300fd870fb990b513815380ba2474703e29ab Properly handle LDAP socket closures in ipa-otpd

master:

  • 0756ce7d53133793b82674757e125524eede4721 Properly handle LDAP socket closures in ipa-otpd

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.4.2
Metadata
None
None
None
Normal
defect
OTP
https://www.redhat.com/archives/freeipa-devel/2016-September/msg00679.html
An issue was fixed when ipa-otpd silently ignores closing of LDAP socket which then leads to failure of all later bind auths and therefore a failure of two factor authentication. This situation may happen if nsslapd-idletimeout is set.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.