diff --git a/0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch b/0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch new file mode 100644 index 0000000000000000000000000000000000000000..c944eb46410555c234604e1a9a8a32cdb56b9689 --- /dev/null +++ b/0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch @@ -0,0 +1,30 @@ +From 3af3972404b72f71851995e0d4e89bdb4ce29862 Mon Sep 17 00:00:00 2001 +From: liuxinhao +Date: Sat, 3 Jun 2023 17:08:16 +0800 +Subject: [PATCH] fix(multi-channel auth): If the authentication fails, the + faillock module counts the data +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +- 修改多路认证情况下,如果认证失败,交由failock模块计数 +--- + data/kiran-authentication-service | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/data/kiran-authentication-service b/data/kiran-authentication-service +index e0f2763..8bbbea7 100644 +--- a/data/kiran-authentication-service ++++ b/data/kiran-authentication-service +@@ -6,7 +6,7 @@ + + # =========================认证配置项目================================ # + # 多路认证模式,成/功则认证通过,失败/切换到密码 跳过多因子认证模式 +-auth [success=done ignore=2 default=die] pam_kiran_authentication.so doauth ++auth [success=done ignore=2 default=bad] pam_kiran_authentication.so doauth + # 多因子认证模式, 成功继续执行PAM流程栈,失败或默认值都为失败 + #auth [success=2 default=bad] pam_kiran_authentication.so doauth + # ==================================================================== # +-- +2.33.0 + diff --git a/kiran-authentication-service.spec b/kiran-authentication-service.spec index b84d411a8a60390247fbf4e3e2da2d7706053bf8..1466082628a4d1e2b380bb7e28e8058717897e18 100644 --- a/kiran-authentication-service.spec +++ b/kiran-authentication-service.spec @@ -1,6 +1,6 @@ Name: kiran-authentication-service Version: 2.5.1 -Release: 4 +Release: 5 Summary: Kiran Desktop kiran authentication service License: MulanPSL-2.0 URL: http://www.kylinsec.com.cn @@ -16,6 +16,7 @@ Patch0006: 0006-fix-default-device-Device-adapters-do-not-update-def.patch Patch0007: 0007-fix-multi-factor-Multifactor-authentication-handling.patch Patch0008: 0008-fix-default-device-Update-the-logic-of-the-default-a.patch Patch0009: 0009-fix-multi-factor-multi-factor-no-jump-login.patch +Patch0010: 0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch BuildRequires: systemd BuildRequires: systemd-devel @@ -91,6 +92,9 @@ systemctl enable kiran-authentication-daemon.service %{_includedir}/kiran-authentication-service/kas-authentication-i.h %changelog +* Sat Jun 03 2023 liuxinhao - 2.5.1-5 +- KYOS-B: If the authentication fails, the faillock module counts the data(#I7937W) + * Fri Jun 02 2023 liuxinhao - 2.5.1-4 - KYOS-B: Device adapters do not update default devices that do not exist - KYOS-B: Multifactor authentication, handling only password authentication