mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2026-03-05 15:57:23 +01:00
Merge remote-tracking branch 'fspoettel/admin-panel-2fa' into totp
# Conflicts: # management/auth.py # management/daemon.py # setup/mail-users.sh # setup/management.sh # setup/migrate.py
This commit is contained in:
35
conf/mfa-totp.schema
Normal file
35
conf/mfa-totp.schema
Normal file
@@ -0,0 +1,35 @@
|
||||
#
|
||||
# MiaB-LDAP's directory schema for Time-based one time passwords (TOTP)
|
||||
#
|
||||
# MiaB LDAP UUID(v4): 7392cdda-5ec8-431f-9936-0000273c0167
|
||||
# or: 1939000794.24264.17183.39222.658243943
|
||||
#
|
||||
|
||||
objectIdentifier MiabLDAProot 2.25.1939000794.24264.17183.39222.658243943
|
||||
|
||||
objectIdentifier MiabLDAPmfa MiabLDAProot:1
|
||||
objectIdentifier MiabLDAPmfaAttributeType MiabLDAPmfa:3
|
||||
objectIdentifier MiabLDAPmfaObjectClass MiabLDAPmfa:4
|
||||
|
||||
# secret consists of base32 characters (see RFC 4648)
|
||||
attributetype ( MiabLDAPmfaAttributeType:1
|
||||
DESC 'TOTP secret'
|
||||
NAME 'totpSecret'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
||||
EQUALITY caseExactIA5Match )
|
||||
|
||||
# tokens are a base-10 string of N digits - set the syntax to the string
|
||||
# representation of a decimal number
|
||||
attributetype ( MiabLDAPmfaAttributeType:2
|
||||
DESC 'TOTP last token used'
|
||||
NAME 'totpMruToken'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
||||
EQUALITY caseExactIA5Match )
|
||||
|
||||
objectClass ( MiabLDAPmfaObjectClass:3
|
||||
NAME 'totpUser'
|
||||
DESC 'MiaB-LDAP User TOTP settings'
|
||||
SUP top
|
||||
AUXILIARY
|
||||
MUST ( totpSecret )
|
||||
MAY ( totpMruToken ) )
|
||||
Reference in New Issue
Block a user