Re: [ldapext] OATH-LDAP as ldapext WG item?

Petr Spacek <pspacek@redhat.com> Wed, 25 November 2015 14:20 UTC

Return-Path: <pspacek@redhat.com>
X-Original-To: ldapext@ietfa.amsl.com
Delivered-To: ldapext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2A6F1B2D48 for <ldapext@ietfa.amsl.com>; Wed, 25 Nov 2015 06:20:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.587
X-Spam-Level:
X-Spam-Status: No, score=-5.587 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.585, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xr2LXA6LUfq0 for <ldapext@ietfa.amsl.com>; Wed, 25 Nov 2015 06:20:28 -0800 (PST)
Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A2881B2D45 for <ldapext@ietf.org>; Wed, 25 Nov 2015 06:20:28 -0800 (PST)
Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by mx1.redhat.com (Postfix) with ESMTPS id 79C1AC0B7AA7 for <ldapext@ietf.org>; Wed, 25 Nov 2015 14:20:27 +0000 (UTC)
Received: from pspacek.brq.redhat.com (pspacek.brq.redhat.com [10.34.128.7]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id tAPEKPS2031947 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <ldapext@ietf.org>; Wed, 25 Nov 2015 09:20:27 -0500
To: ldapext@ietf.org
References: <565478FA.6050502@stroeder.com>
From: Petr Spacek <pspacek@redhat.com>
X-Enigmail-Draft-Status: N1110
Organization: Red Hat
Message-ID: <5655C3A9.2040402@redhat.com>
Date: Wed, 25 Nov 2015 15:20:25 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <565478FA.6050502@stroeder.com>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22
Archived-At: <http://mailarchive.ietf.org/arch/msg/ldapext/GJ3VYitj36wSaPpzhL_qvOZ5E4Y>
Subject: Re: [ldapext] OATH-LDAP as ldapext WG item?
X-BeenThere: ldapext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: LDAP Extension Working Group <ldapext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ldapext>, <mailto:ldapext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ldapext/>
List-Post: <mailto:ldapext@ietf.org>
List-Help: <mailto:ldapext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ldapext>, <mailto:ldapext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Nov 2015 14:20:29 -0000

On 24.11.2015 15:49, Michael Ströder wrote:
> HI!
> 
> Anyone here interested in co-authoring an I-D describing OATH-LDAP (presented
> at LDAPcon 2015)?
> 
> Is there general interest to add this as ldapext WG item?
> 
> I have a schema for HOTP/TOTP (see attachment) and a reference implementation
> for HOTP and some thoughts on operational considerations. TOTP schema might
> need some small work and I have to adapt the implementation.

You might be interested in HOTP/TOTP implementation which is available in
FreeIPA project. It is available in Fedora 22+ and CentOS 7.1+.

Related LDAP schema is on:
http://www.freeipa.org/page/V4/OTP/Schema

Feature design is on:
http://www.freeipa.org/page/V4/OTP

-- 
Petr Spacek  @  Red Hat