totp password overlay

[Ryan Tandy]

Hi Benjamin,

On Tue, Jun 08, 2021 at 10:37:23AM +0200, Benjamin Renard wrote:
>I would like to understand why the sources of the totp password 
>contrib module aren't in the source package openldap while they are in 
>the project git repository[1] (since more than 5 years) ? I would like 
>to play with this module starting by compiling it.

The master branch of the upstream repository contains development code 
that is not ready for release yet.

Releases packaged in Debian are made from the REL_ENG branches; for 
bullseye and earlier, that's OPENLDAP_REL_ENG_2_4. The totp module is 
new in 2.5 and has not been backported to the 2.4 branch.

https://git.openldap.org/openldap/openldap/-/tree/OPENLDAP_REL_ENG_2_4/contrib/slapd-modules/passwd
https://git.openldap.org/openldap/openldap/-/tree/OPENLDAP_REL_ENG_2_5/contrib/slapd-modules/passwd

You could try copying the totp code from 2.5 and building it. I 
don't know whether it would need any code changes to work in 2.4.

OpenLDAP 2.5 is on its way to Debian experimental (currently in NEW [1]) 
and we aim to include it in the next release (Debian 12/bookworm).

[1] https://ftp-master.debian.org/new.html

hope this helps,
Ryan