From 8a76d55d4de3c7873089d168e4e02e6129bddce4 Mon Sep 17 00:00:00 2001
From: Nathaniel McCallum <npmccallum@redhat.com>
Date: Wed, 17 Dec 2014 14:05:42 +0000
Subject: [PATCH] Expand the token auth/sync windows

This is a workaround for RHEL 7.1 to give similar defaults to the
configurable window patch that landed upstream. At some future point,
when this upstream patch is merged into RHEL, this patch should be
abandoned.
---
 daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c | 2 +-
 daemons/ipa-slapi-plugins/ipa-pwd-extop/syncreq.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c b/daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c
index 96c55f39ba2a9dc1e9fc80d5f7d46787803ece47..4db6e4797a0eab4d92ef65bef60bf48fe9110106 100644
--- a/daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c
+++ b/daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c
@@ -68,7 +68,7 @@
 #define IPAPWD_OP_ADD 1
 #define IPAPWD_OP_MOD 2
 
-#define OTP_VALIDATE_STEPS 3
+#define OTP_VALIDATE_STEPS 10
 
 extern Slapi_PluginDesc ipapwd_plugin_desc;
 extern void *ipapwd_plugin_id;
diff --git a/daemons/ipa-slapi-plugins/ipa-pwd-extop/syncreq.c b/daemons/ipa-slapi-plugins/ipa-pwd-extop/syncreq.c
index 0aef438023e7f23d7219273e9f5efd5572e73c3f..b40fc66256abf14c4f6d9609f600747797c3c0ed 100644
--- a/daemons/ipa-slapi-plugins/ipa-pwd-extop/syncreq.c
+++ b/daemons/ipa-slapi-plugins/ipa-pwd-extop/syncreq.c
@@ -40,7 +40,7 @@
 #include "../libotp/otp_token.h"
 #include "syncreq.h"
 
-#define OTP_SYNC_MAX_STEPS 25
+#define OTP_SYNC_MAX_STEPS 100
 
 bool sync_request_present(Slapi_PBlock *pb)
 {
-- 
2.1.0