install error

[lei xiao]

Could not add the column 'Type' to table tokeninfo

(OperationalError) (1060, "Duplicate column name 'Type'") 'ALTER TABLE tokeninfo ADD COLUMN `Type` VARCHAR(100)' ()

Could not add column 'condition' to table 'policy'

(OperationalError) (1060, "Duplicate column name 'condition'") 'ALTER TABLE policy ADD COLUMN `condition` INTEGER NOT NULL' ()

Could not add column 'priority' to table 'resolverrealm'

(OperationalError) (1060, "Duplicate column name 'priority'") 'ALTER TABLE resolverrealm ADD COLUMN priority INTEGER' ()

Could not add the column 'adminrealm' to table policy

(OperationalError) (1060, "Duplicate column name 'adminrealm'") 'ALTER TABLE policy ADD COLUMN adminrealm VARCHAR(256)' ()

Could not add column 'revoked' to table 'token'

(OperationalError) (1060, "Duplicate column name 'revoked'") 'ALTER TABLE token ADD COLUMN revoked BOOL NOT NULL' ()

Could not add column 'locked' to table 'token'

(OperationalError) (1060, "Duplicate column name 'locked'") 'ALTER TABLE token ADD COLUMN locked BOOL NOT NULL' ()

These are errors that appear when I install:

ubuntu 14.04 : apt-get install privacyidea-apache2 aprivacyidea-readius

Now the problems encountered in the use, many errors will not be locked after attempting token

what should I do

 

[Cornelius Kölbel]

Am Donnerstag, den 12.11.2015, 23:57 -0800 schrieb lei xiao:
> Could not add the column 'Type' to table tokeninfo
> (OperationalError) (1060, "Duplicate column name 'Type'") 'ALTER TABLE
> tokeninfo ADD COLUMN `Type` VARCHAR(100)' ()
> Could not add column 'condition' to table 'policy'
> (OperationalError) (1060, "Duplicate column name 'condition'") 'ALTER
> TABLE policy ADD COLUMN `condition` INTEGER NOT NULL' ()
> Could not add column 'priority' to table 'resolverrealm'
> (OperationalError) (1060, "Duplicate column name 'priority'") 'ALTER
> TABLE resolverrealm ADD COLUMN priority INTEGER' ()
> Could not add the column 'adminrealm' to table policy
> (OperationalError) (1060, "Duplicate column name 'adminrealm'") 'ALTER
> TABLE policy ADD COLUMN adminrealm VARCHAR(256)' ()
> Could not add column 'revoked' to table 'token'
> (OperationalError) (1060, "Duplicate column name 'revoked'") 'ALTER
> TABLE token ADD COLUMN revoked BOOL NOT NULL' ()
> Could not add column 'locked' to table 'token'
> (OperationalError) (1060, "Duplicate column name 'locked'") 'ALTER
> TABLE token ADD COLUMN locked BOOL NOT NULL' ()

Take a look at the messages. It tries to create some database columns.
But the columns already exist.
Nothing to worry about!

>
>
> These are errors that appear when I install:
>
> ubuntu 14.04 : apt-get install privacyidea-apache2
> aprivacyidea-readius
>
>
> Now the problems encountered in the use, many errors will not be
> locked after attempting token
>
>
>
> what should I do

Please describe what problem you have.
I do not see, what problem you?

I very much recommend that you go a professional service contract.
https://netknights.it/en/leistungen/service-level-agreements/
Then we could setup a remote session or use other means to get you up
and running.

Kind regards
Cornelius
>
>
>
>
>
>
>
>
> --
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/privacyidea/dd41e3ed-836d-4c6f-8a23-dc816b78d768%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

--
Cornelius Kölbel
corneliu...@netknights.it
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

[lei xiao]

By default, the user's token in the wrong after 10 will be locked.

But I can not be locked.

failcounter automatically cleared.

在 2015年11月13日星期五 UTC+8下午3:57:24，lei xiao写道：

[lei xiao]

When the user authentication is a failure when there will be a count of failure,

It failed 10 times should be locked and can not re-certification.

But here's my problem is that when the user authentication fails more than 10 times, maxfail & failcounter automatically cleared

在 2015年11月13日星期五 UTC+8下午3:57:24，lei xiao写道：

Could not add the column 'Type' to table tokeninfo

[Cornelius Kölbel]

The failcounter is cleared if it has not reached the maxfail AND the
user enteres a valid OTP value.

Example: maxfail=10. The user fails to authenticate 7 times. The
failcounter is increased to 7. If the user now succeeds to
authenticated, the failcounter is cleared.
If the failcounter reaches 10, the failcounter must be cleared manually.

I can not reproduce your problem, so I need more input what you are
doing.

1. which version are you using
2. which token type are you using
3. How/Where are you authenticating.
4. Is the token assigned to a user?
5. Are you using OTPPIN=userstore or any kind of policy?
6. What are you doing when the failcounter reaches maxfail. What
happens?


Kind regards
Cornelius

> --
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/privacyidea/5ca56dc9-5b6a-45c1-9861-8d0ac047354a%40googlegroups.com.

[lei xiao]

root@radius1:~# aptitude show privacyidea

Package: privacyidea                     

State: not installed

Version: 1.5.1-1trusty

Priority: 可选

Section: python

Maintainer: Cornelius Kölbel <corn...@privacyidea.org>

Architecture: all

Uncompressed Size: 13.1 M

token type : totp

I do the test from the radius client

I deliberately do the wrong side in the radius client authentication, verification token of loked function. Mainly to prevent brute force.

I observed, when I mistakenly certified more than 10 times, when the first 11 times I do use the correct passcode authentication. This time will be the authentication is successful, Maxfail & failcounter will be cleared

在 2015年11月13日星期五 UTC+8下午3:57:24，lei xiao写道：

Could not add the column 'Type' to table tokeninfo

token asign by administrator

 OPTPIN = TOKENPIN

 I deliberately do the wrong side in the radius client authentication, verification token of loked function. Mainly to prevent brute force.

I observed, when I mistakenly certified more than 10 times, when the first 11 times I do use the correct passcode authentication. This time will be the authentication is successful, Maxfail & failcounter will be cleared

[Cornelius Kölbel]

version 1.5.1 is heavily outdated.
Please do not use it anymore!

The new version is 2.7.
The packages are called

python-privacyidea
privacyidea-apache2 or privacyidea-nginx

Please see
http://privacyidea.readthedocs.org/en/latest/installation/ubuntu.html
for install instructions.

> --
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/privacyidea/ea43890b-1bd4-4b2b-a729-95377be2d257%40googlegroups.com.

[lei xiao]

aoot@radius1:~# history | grep apt-get

apt-get install privacyidea-radius privacyidea-apache2 -y

I was so installation

在 2015年11月13日星期五 UTC+8下午3:57:24，lei xiao写道：

Could not add the column 'Type' to table tokeninfo

[Cornelius Kölbel]

Thanks a lot for pointing this out.
I have fixed this issue with the failcounter!

Kind regards
Cornelius

> --
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/privacyidea/59681cea-7884-4baa-9e5f-5f7f5b698a47%40googlegroups.com.

[lei xiao]

I was wondering if you modify those places?

About failcounter

I can change it

在 2015年11月13日星期五 UTC+8下午3:57:24，lei xiao写道：

Could not add the column 'Type' to table tokeninfo

[Cornelius Kölbel]

Which places?

You really need to respond to my mail - otherwise I do not know, what
you are referring to.
The failcounter is fixed. You can get a version 2.7.1 at the usual
locations.

> --
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/privacyidea/1fe28786-b6ac-4a12-87aa-c52dc8ffacc7%40googlegroups.com.