[Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

[Nathaniel McCallum]

This prevents any local attempt at rapid token code replay. If two
token codes hit the system at roughly the same moment, only the
first write will succeed. All subsequent authentications will fail.

This obviates the need for an OTP authentication lock.

https://fedorahosted.org/freeipa/ticket/4493
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-npmccallum-0062-Use-delete-add-for-OTP-counter-watermark-updates.patch
Type: text/x-patch
Size: 5063 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140828/8da1f615/attachment.bin>