r2evans

The latter is unmaintained, recommending a still-maintained fork: https://github.com/Spomky-Labs/otphp. Both seem fine, I haven't read enough to have an idea of which would be better. For storing the token, does...

@flhoest, does this mean you're planning to work on it? I have it on my todo list but haven't been able to commit time to it yet. @coudot, this requires...

Thanks for the pointer. I've been trying to learn the code but get an LDAP error. Using command-line php (actually, [psysh](http://psysh.org/)), I manually load all of `index.php` and `pages/setquestions.php` in...

Huh, didn't know that. Does this mean that "questions" won't work in an AD environment? I don't see any conditioning of storage location based on `$ad_mode`. I'm not able currently...

Alright, I'm learning. I successfully added to `organizationalPerson` an attribute `telexNumber` (thanks again, @aurbjo). Unfortunately, it is visible to other users. I've been looking around (such as [at zytrax](http://www.zytrax.com/books/ldap/ch3/)) and...

I still like your previous comment, *"You should not force someone to extend the schema"*, which I am further interpreting to mean "make changes to the schema or server configuration"....

I think that's a great idea, thanks for the suggestion. I think this is perhaps the way I'll move forward with it. 1. All storage will be in `organizationPerson/telexNumber`. We...

(Caveat: I'm not a dev with LTB.) Are you talking about a simple blacklist? It sounds like you mean substring matches, meaning `!password123!` should fail, since either `password` or (at...

As a thought, would it be a bit robust to use something like [cracklib](http://php.net/manual/en/intro.crack.php) for checking more than just a dictionary? It supports more than just blacklists, though I admit...

(Essentially the same link I posted earlier.) Yes, and furthermore it was removed from base-php (around php-5.0) and pushed to be an extension, so that says that it is not...