Cornelius Kölbel

Results 130 issues of Cornelius Kölbel

We need an easy way to move/copy tokens between processes or installations. The requirement for this functionality keeps popping up in different migration scripts. We should provide these functions in...

Topic: Token
Type: Feature request
Topic: Tools

pi-manage or a different tool should allow to reencrypt the data. It might be difficult to find all data, that needs to be reencrypted: * token seeds in the `token`...

Type: Enhancement
Topic: Tools
Topic: HSM

With a UI redesign we can also improve the icon set. Possible icons: https://app.streamlinehq.com/icons/streamline-mini-line?twclid=11492388639191490562

Layer: UI

Allow the RADIUS passthru to also handle RADIUS challenge response. This needs to be done here https://github.com/privacyidea/privacyidea/blob/master/privacyidea/lib/policydecorators.py#L297 The RADIUS response must be checked for the package type [Access-Challenge](https://tools.ietf.org/html/rfc2865#section-4.4). If so...

Prio: Medium
Topic: RADIUS

When enrolling a certificate request and creating the key on the client we used the keygen tag. This did only work in firefox and is now deprecated. We need to...

Type: Known issue
Topic: Token
Topic: Enrollment

We need to pimp setup.py by * [ ] using extras to *tag* certain installation variants like pip install privacyidea[stable] pip install privacyidea[postgres] * [ ] updating new versions -...

The serialization function ``_log_to_string`` does not contain the resolver: https://github.com/privacyidea/privacyidea/blob/master/privacyidea/lib/auditmodules/sqlaudit.py#L309 This serialization is used for the signature - thus the resolver is not contained in the signature.

Type: Known issue
Prio: Low
Topic: Audit

Currently the aeshms module does not encrypt empty strings. It is not clear, if this has any relevance or any impact on functionality. Check it and fix it.

hardening

An LDAPresolver can contain several login attributes. These can be used in the /validate/check request to authenticate the same user object. However, currently the audit entry contains the login attribute...

Type: Feature request

Could we check the runtime of an SSL certificate and use the notification handle to warn the admin? When privacyIDEA communicates to an LDAPS we could *warn* the admin, if...

Type: Idea!