CHANGES

Version Next

    - Refactor to avoid warnings and reduce code duplication (issue #49).

Version 1.1.11 released June 27, 2024

    - Fixed build issue with libapr on some systems (issue #48)
    - Added otplock(1) utility (issue #38)

Version 1.1.10 released May 4, 2022

    - Fixed bug in genotpurl on platforms with signed "char" (pr #46)
    - Added "-K" flag to genotpurl tool to specify key length (pr #43)

Version 1.1.9 released June 22, 2019

    - Added genotpurl(1) utility
    - Added "-F" flag to otptool(1).

Version 1.1.8 relesed October 30, 2017

    - Added PINFakeBasicAuth configuration option

Version 1.1.7 (r147) released 17 May 2014

    - Fixed bug where users file could get deleted when using Apache worker MPM (issue #22)
    - Added "OTPAuthFallThrough" to allow fall through to other auth providers (issue #23)
    - Allow "logout" by sending empty password (issue #24)
    - Count PINs against OTPAuthMaxOTPFailure even when they have the wrong length

Version 1.1.6 (r131) released 2 Apr 2013

    - Detect errors when writing to the new users.txt file
    - Fix (harmless) bug where new users.txt file was not being closed
    - Add -Werror configure flag to fail on compiler warnings

Version 1.1.5 (r124) released 29 Nov 2012

    - Allow building on systems without strptime(3) (e.g., Windows)
    - Add support for Apache 2.4.x

Version 1.1.4 (r106) released 27 Jun 2011

    - Always allow stale time-based offsets to re-synchronize (issue #14)
    - Added "OTPAuthMaxOTPFailure" to lock accounts after repeated wrong OTP's

Version 1.1.3 (r94) released 28 Mar 2011

    - Fixed bug with "OTPAuthPINAuthProvider" and <AuthnProviderAlias>

Version 1.1.2 (r87) released 22 Mar 2011

    - Added "OTPAuthPINAuthProvider" to allow alternate verification of PINs
    - Added "OTPAuthLogoutOnIPChange" flag to auto-logout on IP address change
    - Build fixes for Solaris

Version 1.1.1 (r66) released 15 Aug 2010

    - Build fixes

Version 1.1.0 (r44) released 23 Jun 2009

    - Moved time interval and #digits configuration into users file
    - Fixed bug in time based token synchronization at large offsets
    - Added support for the Mobile-OTP algorithm: http://motp.sourceforge.net/
    - Added otptool(1) one-time password utility program.
    - Accept either decimal or hexadecimal values (basic auth only).

Version 1.0.0 (r10) released 14 Jun 2009

    - Initial release