-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 See https://github.com/dynalogin/dynalogin/pull/1
diff --git a/libdynalogin/dynalogin.c b/libdynalogin/dynalogin.c index d6b606b..f57039e 100644 - --- a/libdynalogin/dynalogin.c +++ b/libdynalogin/dynalogin.c @@ -267,8 +267,20 @@ dynalogin_result_t dynalogin_authenticate_internal else { fail_inc = 0; + syslog(LOG_WARNING, "Token replay detected, denying authentication"); rc = OATH_REPLAYED_OTP; } + /* totp_offset only contains a valid value if the OTP was + inside the specified window - in that case the rc is the + absolute offset */ + if(rc>=0 && totp_offset < 0) + { + syslog(LOG_WARNING, "TOTP validation returned offset %d (~%d seconds behind)",totp_ + } + else if(rc > 0) + { + syslog(LOG_WARNING, "TOTP validation returned offset %d (~%d seconds ahead)",totp_o + } break; default: syslog(LOG_ERR, "unsupported scheme"); - -- GPG-Key: https://bit.ly/vwmUVA or 00B96447 on your favourite keyserver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Icedove - http://www.enigmail.net/ iQIcBAEBAgAGBQJRfnNtAAoJEK4xK/RwikTnEW0QAInYgzmzqpMwA0wjl3pi1J2w TeKCYIMjT7FNXLUHMHjF4NMvzUDN50NOZ/3hsCsJDC9LgDS1mH0IWCZ3VpNy2PPA k3ZYEQ2YYi8vQW0bWb5UgmALZ43R8SeRUuy1C5vVSZRK1PndTrS0i4fXPQZ4UWJa d1KSUU9utkVNtbd8xJcf5o0TH7yU4ampfWuHn7XifYHRFZqSI0d82IrI4hed6FNA tIZChB1gE0yFnTFIUtb8hp00odJngTILKCDqF3ULTJsCpQhNE+AsaXokjTpgFUlV bBNpSSt8SI4eRy9hd3OhA7hJBaJ/o6mQFUkwMjc+pP4UouGmhM++i0jg8+9y18o/ bHF1ZfVIN6En8/WXPmDIVFhOCpuZftatM7YNJwBftjJHDY1vHoXj6chkCDfEPF8X pftGZTzgX8ekTW+UzwaJbR/Njxl+ukrcGBOd/QaOiLjFzGbUy+9KKi79qGw/evIC N1alrhGGhqnodO8hU3snSiiXSsLvIUU+pGmTMCVtX8JjBAbkK/qmLwTQTzyFqi4I CEGS72mW+2vpG9MOLsI+bV6ymPQa4x3aS9BRy/htrZ8gUyTuf6v2fjGJTq0pdwkf zqh72kloTiFGBb208cJctLUWfPMDzfqkftuDWXph62Naa98GcBeavI7+nOtu6r7F sMs04ez7wPsdR75IxQZj =GNJY -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org