providers/ldap: improve password totp detection (#6006)

* providers/ldap: improve password totp detection

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add flag for totp mfa support

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* keep support for static tokens

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix migrations

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
Jens L
2023-06-20 12:09:13 +02:00
committed by GitHub
parent 962cbf9f6a
commit 01311929d1
25 changed files with 272 additions and 59 deletions

View File

@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2023-06-13 11:23+0000\n"
"POT-Creation-Date: 2023-06-19 17:34+0000\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
@ -861,7 +861,7 @@ msgstr ""
#: authentik/providers/ldap/models.py:53
msgid ""
"The start for uidNumbers, this number is added to the user.Pk to make sure "
"The start for uidNumbers, this number is added to the user.pk to make sure "
"that the numbers aren't too low for POSIX users. Default is 2000 to ensure "
"that we don't collide with local users uidNumber"
msgstr ""
@ -869,16 +869,25 @@ msgstr ""
#: authentik/providers/ldap/models.py:62
msgid ""
"The start for gidNumbers, this number is added to a number generated from "
"the group.Pk to make sure that the numbers aren't too low for POSIX groups. "
"the group.pk to make sure that the numbers aren't too low for POSIX groups. "
"Default is 4000 to ensure that we don't collide with local groups or users "
"primary groups gidNumber"
msgstr ""
#: authentik/providers/ldap/models.py:97
#: authentik/providers/ldap/models.py:76
msgid ""
"When enabled, code-based multi-factor authentication can be used by "
"appending a semicolon and the TOTP code to the password. This should only be "
"enabled if all users that will bind to this provider have a TOTP device "
"configured, as otherwise a password may incorrectly be rejected if it "
"contains a semicolon."
msgstr ""
#: authentik/providers/ldap/models.py:108
msgid "LDAP Provider"
msgstr ""
#: authentik/providers/ldap/models.py:98
#: authentik/providers/ldap/models.py:109
msgid "LDAP Providers"
msgstr ""