Cornelius Kölbel

change the challenge

29

Should be able to change the challenge, so that we get some kind of one time password effect. At the moment the process results in one static password to unlock...

[IP-638] Add product filtering

3

Add a filter field in the product list view. You can filter for SKU, product name and product_description. Closes [IP-638]

### Top-level intent Running privacyIDEA under very high load. This problem can occur under high load, especially under performance testing. IntegrityError: (pymysql.err.IntegrityError) (1062, u"Duplicate entry 'IP-CLIENTAPPLICATION' for key 'caix'") ###...

Limit the number of SMS sent, to avoid being spammed

4

The SMS could be limited to a certain number of SMS sent per time interval. ## Background info SMS needs to be triggered by the user's password or by an...

Add authentication against worker

1

This is connected to #2966 preferably using a client certificate (currently not implemented in the worker) privacyIDEA uses client certificates to authenticate against the worker in the secure_channel. See: https://github.com/nilsbehlen/msca-grpc/blob/0f9e621c1e7556273d7c180a939e5d70d5644337/main.py#L25

Upward group membership recursion in LDAP resolver

4

**Is your feature request related to a problem? Please describe.** privacyIDEA should return the groups a user is member of in a RADIUS response. However, the LDAP resolver can only...

Allow a simple manual identifier to fetch SSH keys. -> 3.8 The client tells the privacyIDEA server: 1. it wants to get SSH keys for user "U" 2. which manual...

Get rid of IP binding -- for offline and SSH keys

3

**Is your feature request related to a problem? Please describe.** For using SSH keys or offline OTP we need a machine resolver, since the token is attached to a machine....

convenient policy action search over all scopes

7

Current behaviour: When the scope is selected and the admin searches for an action the actions are filterd. Additional behaviour: When the scope is not selected and the admin searches...

Multi-Challenge: Allow token enrollment during /validate/check

1

We have the possibility to add mechanism in a multi-challenge response communication during `/validate/check`. Currently we do this for [changing pins](https://github.com/privacyidea/privacyidea/blob/28f138522618915950769a0fe196720f3b417393/privacyidea/lib/challengeresponsedecorators.py#L76) and for [resyncing tokens](https://github.com/privacyidea/privacyidea/blob/28f138522618915950769a0fe196720f3b417393/privacyidea/lib/challengeresponsedecorators.py#L169). The goal is, to also...