[Pkg-auth-maintainers] Bug#705939: fix

[Fabian Grünbichler]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

See https://github.com/dynalogin/dynalogin/pull/1

diff --git a/libdynalogin/dynalogin.c b/libdynalogin/dynalogin.c
index d6b606b..f57039e 100644
- --- a/libdynalogin/dynalogin.c
+++ b/libdynalogin/dynalogin.c
@@ -267,8 +267,20 @@ dynalogin_result_t dynalogin_authenticate_internal
                else
                {
                        fail_inc = 0;
+                       syslog(LOG_WARNING, "Token replay detected,
denying authentication");
                        rc = OATH_REPLAYED_OTP;
                }
+               /* totp_offset only contains a valid value if the OTP was
+                  inside the specified window - in that case the rc
is the
+                  absolute offset */
+               if(rc>=0 && totp_offset < 0)
+               {
+                   syslog(LOG_WARNING, "TOTP validation returned
offset %d (~%d seconds behind)",totp_
+               }
+               else if(rc > 0)
+               {
+                   syslog(LOG_WARNING, "TOTP validation returned
offset %d (~%d seconds ahead)",totp_o
+               }
                break;
        default:
                syslog(LOG_ERR, "unsupported scheme");

- -- 
GPG-Key: https://bit.ly/vwmUVA or 00B96447 on your favourite keyserver
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/
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=GNJY
-----END PGP SIGNATURE-----