OSDN -- 开发和下载开源软件
简体中文翻译状态 translation status for zh

RSS
Download List

项目描述

LinOTP is a solution for strong two-factor authentication with one time passwords. It features a modular architecture into which UserIdResolver, authentication, and OTP calculation modules can be plugged. It includes UserIdResolver modules for LDAP/AD, SQL, and flat file user databases, and authentication modules for PAM and RADIUS. New modules can be developed easily. Supported tokens are HMAC-OTP/HOTP (RFC 4226/ OATH compliant), Aladdin eToken PASS, eToken NG-OTP, Safeword Alpine, Yubikey, Google Authenticator, motp, SMS OTP/Mobile TAN, email token, and a Simple Pass token for users without token hardware. TOTP is supported, along with a new algorithm for daily passwords for applications not supporting RADIUS. OCRA tokens are supported to allow transaction signing in banking environments. CLI, Web, and GTK+ GUI clients are available for management. LinOTP features multi-client capability, redundancy, and a self-service portal. It has been used with PAM for local and SSH logins, Apache, VPN, and Windows Terminal Server, and is OATH certified.

系统要求

System requirement is not defined
Information regarding Project Releases and Project Resources. Note that the information here is a quote from Freecode.com page, and the downloads themselves may not be hosted on OSDN.

2012-12-14 09:08
2.5.0

此版本添加了完全新的 OCRA 功能，让您执行银行交易和其他数据签名。新的安全模块使您能够在不同的、 灵活的方式中使用的加密密钥 （例如，你可以使用像 SafeNet LunaSA 外部硬件安全模块）。现在支持 DB2。已添加的自助上机时间为基础的身份验证谷歌推出。LDAPResolver 已得到改进： 可通过 entryUUID 或 ObjectGUID 标识的用户对象。此版本添加了层通过政策没有标记，用户身份验证使用客户端 IP 限制访问自助上机的功能和 TOTP 修复错误的政策。
标签: OCRA, DB2, Security Modules, HSM
This release adds completely new OCRA functionality, letting you perform banking transactions and sign other data. New Security Modules enable you to use the encryption keys in different, flexible ways (e.g., you can use external Hardware Security Modules like the SafeNet LunaSA). DB2 is now supported. Rollout of time-based Google Authenticators to Selfservice has been added.
LDAPResolver has been improved: User Objects may be identified by entryUUID or ObjectGUID. This release adds policy passthru for authenticating users without tokens, policy to use Client-IP for restricted access to selfservice functionalities, and a TOTP bugfix.

2012-08-17 07:12
2.4.4 EE

这个企业版添加 SMTP SMS 网关支持，基于身份验证的客户端，用于检索 OTP 值用于 SQL 解析程序，打印一次密码列表 （纸密码）、 改进的动态令牌类加载、 测试按钮可以用自定义文本，自动长沙检测类型导入 eToken 通行证，Unicode 支持 SQL 和 LDAP 的冲突解决程序时发送的 SMS OTP 测试功能的授权改进的搜索功能在 WebUI，关闭会话保护易于使用的 api 的能力和改进的 Oracle 支持。
标签: authorization, Oracle, SMTP SMS gateway
This Enterprise Edition adds SMTP SMS gateway support, authorization based on the authenticating client, functionality to retrieve OTP values to print One Time Password lists (paper passwords), improved dynamic token class loading, a test button for SQL Resolver, SMS OTP tests which can be sent with customized text, automatic SHA type detection when importing eToken Pass, Unicode support for SQL and LDAP Resolver, improved search capabilities in WebUI, the ability to turn off session protection to ease the use of the API, and improved Oracle support.

2012-07-26 06:56
2.4.4 CE

社区版的新版本已经发布到 Python 软件包的索引。此版本添加授权基于客户端的 IP 地址，添加功能来检索 OTPs 打印一次密码列出、 提高动态令牌类加载、 进口 eToken 通行证： 自动长沙类型检测，提高了在 tokenview 和用户视图，搜索功能和增加关闭会话保护的能力。
标签: dynamic token loading, authorization, password list
A new version of the community edition has been released to the Python Package Index. This release adds authorization based on the client's IP address, adds functionality to retrieve OTPs to print One Time Password lists, improves dynamic token class loading, imports eToken Pass: automatic SHA type detection, improves search capabilities in tokenview and userview, and adds the ability to turn off session protection.

2012-04-26 06:32
2.4.3

此版本添加了 pam_linotp.py，一个 Python PAM 模块。它提高了 IE 和谷歌浏览器 (等待覆盖) 支持、 修复 totp 重新同步，添加 eTokenNG 检察官办公室的大规模扩招，添加一个函数来检查现有的序列号、 添加 hmac_Hashlib 和 totp_timestep 的政策，添加能力要从自助上机，注册 HOTP 和 TOTP 添加简单的誓言 CSV 文件导入，提高了 SMS 网关的返回值的处理提高鲁棒性管理冲突解决程序和境界，添加 SQL 看门人，若要删除旧的审计日志，可以提高性能，并有几个未成年的修复程序。
标签: Python PAM, mass enrollment eTokenNG OTP, OATH import
This release adds pam_linotp.py, a Python PAM module. It improves the support for IE and Google Chrome (wait overlay), fixes totp resync,
adds mass enrollment for eTokenNG OTP,
adds a function to check for existing serial numbers,
adds policies for hmac_Hashlib and totp_timestep,
adds the ablity to enroll HOTP and TOTP from selfservice, adds import for simple OATH CSV files,
improves the handling of the return values of SMS gateways, improves the robustness of managing resolvers and realms, adds an SQL janitor to remove old audit logs, improves performance, and has several minor fixes.

2011-12-21 06:36
2.4.2

此版本添加了通过输入一个 PIN 在每个登录的身份验证正常发送短信的能力。它将添加自动分配功能为未分配的标记 ；令牌会被派到上第一次使用的用户。它将添加从一个令牌的 PIN 复制到其他的功能。它将添加丢失的令牌的工作流。
This release adds the ability to send SMS by entering a PIN at the normal authentication/login. It adds auto assigning functionality for unassigned tokens; the tokens get assigned to the user on first use. It adds functionality to copy the PIN from one token to the other.
It adds a workflow for a lost token.

Project Resources

Project Page 首页