[PATCH] krb5: do not send SSS_OTP if two factors were used

[Sumit Bose]

Hi,

This patch fixes an issue with two factor authentication. When the user
is prompted to enter long term password (first factor) and one-time
component (second factor) separately the first component may remain on
the PAM stack so that other modules can use the long term password.

bye,
Sumit

[Jakub Hrozek]

On Thu, Jul 23, 2015 at 05:20:17PM +0200, Sumit Bose wrote:
> Hi,
>
> This patch fixes an issue with two factor authentication. When the user
> is prompted to enter long term password (first factor) and one-time
> component (second factor) separately the first component may remain on
> the PAM stack so that other modules can use the long term password.
>
> bye,
> Sumit

ACK.

[Jakub Hrozek]

On Tue, Jul 28, 2015 at 08:51:44PM +0200, Jakub Hrozek wrote:
> On Thu, Jul 23, 2015 at 05:20:17PM +0200, Sumit Bose wrote:
> > Hi,
> >
> > This patch fixes an issue with two factor authentication. When the user
> > is prompted to enter long term password (first factor) and one-time
> > component (second factor) separately the first component may remain on
> > the PAM stack so that other modules can use the long term password.
> >
> > bye,
> > Sumit
>
> ACK.

* master: b698a04b37ad33e3de5bee82edc6e0e7b5ba2cfe