dynalogin/dynalogin — pull request #1 by Fabian-Gruenbichler (2013-04-29 13:15:36+00:00)
Title: GSoC 2013 application bugfix: totp offset and replay logging

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705939

Sample output for replayed OTP values:

Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: new incoming connection
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: attempting DYNALOGIN auth for user=testuser
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: user = testuser, count = 45574687
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: Token replay detected, denying authentication
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: updated data: user = testuser, count = 45574687
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: DYNALOGIN denied for user=testuser
Apr 29 15:02:51 debian /usr/sbin/dynalogind[11386]: client connection closed

Sample output for offset logging:

Apr 29 15:04:03 debian /usr/sbin/dynalogind[11386]: new incoming connection
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: attempting DYNALOGIN auth for user=testuser
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: user = testuser, count = 45574687
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: TOTP validation returned offset 2 (~60 seconds ahead)
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: updated data: user = testuser, count = 45574691
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: DYNALOGIN success for user=testuser
Apr 29 15:04:04 debian /usr/sbin/dynalogind[11386]: client connection closed