Re: OpenLDAP and dynalogin (two-factor auth with HOTP)

[Dimitri <mitya@cargosoft.ru>]

Hi,

I've been working on a related problem recently, so this may sound
interesting to you. I've developed a SLAPI plugin that implements OATH
HOTP authentication as LDAP simple bind. Token objects are stored in
LDAP directory; synchronization is implemented as an EXOP. SLAPI
implementation in OpenLDAP lacked EXOP support, so I've fixed that, too
(and I'm going to submit a patch soon). The project is being prepared to
be published under an open license. If that sounds interesting for you,
don't hesitate to drop me an email.

I'm also planning to port this plugin to OpenLDAP's native overlay API.

Dimitri