From 14e70564698425b5bee59d2e6dcaff11db8ea5dd Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 30 Oct 2026 21:49:34 +0100 Subject: [PATCH] =?UTF-8?q?NK-WP-0054-T05:=20evidence=20=E2=80=94=20resolv?= =?UTF-8?q?er=20password=20restored=20from=20custody;=20OpenBao=20login=20?= =?UTF-8?q?works?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 673304@bnt-lap001 Assistant-Session: 959b12c7-cf2e-440b-a60d-91229cc9e96e --- .../2026-10-30-nk54-bind-split/README.md | 9 +++++++-- .../secrets.enc/authelia/secrets.env.age | Bin 1507 -> 1507 bytes .../secrets.enc/breakglass/secrets.env.age | Bin 491 -> 491 bytes .../bootstrap/secrets.enc/keycape/key.pem.age | Bin 1904 -> 1904 bytes .../secrets.enc/keycape/pi_admin_token.age | Bin 4036 -> 4036 bytes .../secrets.enc/keycape/secrets.env.age | Bin 588 -> 588 bytes .../secrets.enc/lldap/secrets.env.age | Bin 1143 -> 1143 bytes .../secrets.enc/postgres/secrets.env.age | Bin 594 -> 594 bytes .../secrets.enc/privacyidea/pi.enc.age | Bin 296 -> 296 bytes .../secrets.enc/privacyidea/private.pem.age | Bin 1875 -> 1875 bytes .../secrets.enc/privacyidea/public.pem.age | Bin 651 -> 651 bytes .../secrets.enc/privacyidea/secrets.env.age | Bin 1143 -> 1143 bytes 12 files changed, 7 insertions(+), 2 deletions(-) diff --git a/docs/evidence/2026-10-30-nk54-bind-split/README.md b/docs/evidence/2026-10-30-nk54-bind-split/README.md index 5ad339a..08e3de5 100644 --- a/docs/evidence/2026-10-30-nk54-bind-split/README.md +++ b/docs/evidence/2026-10-30-nk54-bind-split/README.md @@ -40,8 +40,13 @@ UTC, agent (Claude Code) guiding. All receipts are value-free (`values_recorded: every OTP check failed: KeyCape logged `mfa_failed` (`openbao-admin`) and `mfa_check_error` (`user-engine-portal`); privacyIDEA logged `LDAP Bind unsuccessful: invalidCredentials (49)` from 19:00:10 UTC, last successful lookup 18:49:30 UTC, step 10 at 18:53 UTC. Founder found Bind DN - `uid=admin,…` on `lldap-coulomb` in the privacyIDEA UI, set `uid=svc-privacyidea,…` with the custody - `LLDAP_SVC_PRIVACYIDEA_PASS`, and **Test LDAP Resolver** passed. No repository tool rewrites the + `uid=admin,…` on `lldap-coulomb` in the privacyIDEA UI and changed it to `uid=svc-privacyidea,…`; + the Bind DN persisted but the hand-entered bind password did not match. A one-off attended script + (reusing `realm_bootstrap.py`'s client and custody reader) then wrote only `BINDPW` from the custody + `LLDAP_SVC_PRIVACYIDEA_PASS`, checked the other resolver fields unchanged and resolved + `platform-root` through the resolver; the founder's OpenBao OIDC login with OTP then succeeded. + Prefer the custody-fed write over UI entry: the German UI offered only the two test buttons, and + pasting the value by hand is error-prone. No repository tool rewrites the resolver, so step 8's apply most likely did not take effect; its OTP check passed only because the old shared password was still valid. Runbook step 8 now requires the resolver Bind DN and test, and step 10 a fresh OTP sign-in. diff --git a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age index 09e529b8a86928485aee928109f734883459d03a..9937140d89d38ff5951e2c8a1865043cb4d32979 100644 GIT binary patch delta 1493 zcmV;`1uFXE3*!rrAb&zpb7N3QM>j-jVpeNYZZk%9OH@g8ad|{JLN_>VH)k?KXgFg= zH)m5(cM3@|Ygs`}Z7XhLF>W$1WLa@#NmW`iW@SoKP)TlfOLZ$!dRJj$FjhlLK?*G` zEg(-!FG56fb5Ji=P&HI!YhzeyWn*r5Fj7ikOhR^9Mp-dVYJW3tPex^BNiYi7r#nb^ z*z^6WIb?>UEdGcvT%#+0Ht$slQ#vhd_@8BoEgdD8xV+jX^;)sreL0y;{!#0-JXP&y zONGcHwFq$%`<%V!N0!Mo65hK_cYnpx1Zbi|-e*&a4tgSFYEy8Ci+5PB5wg(xP ze34)>fIrb!KNjI8H6m0}6NLyMYibClb%s>}4|}MI%o0k~o9&)yaLVVX-$>sSdDcg9 z0iw^eAY~yZv(^+S!zheQ0>|w{`H06nqijpF%eVC|z<=(mEMPj+9rZTPdyU!D|HtOK zPAD*C(Dk>$_5d<^Gf+|ojxk4Y8ZSJYy#$q1E7YzS>aQ#Q$q@fx4n|eu!kEA@Q=eI3 zF>NV!_Us=$vr5%~RQXFrja|?rxuv;g{QV4%*0*AIn)Y1IOsOttO=T7;1kB?*L*Cfj zaaIt0Cx4c0!=#!-qNv6cVtD6}-v26cbYOVo4%(n$gbBzV#K>ih7~Xq4^L&n~V#=qA?8HsKs>EGOr_`kzI(B^`uq!BZ@Nw+uHv&xW zn?roYX0_}wSG*s)4W%2}#T6#W!Nd?_EN>lqY}r;f1z0BeOjf;OJC)iV?T=R9g*RR1 z=!14GVGLx4U^d#kVZqJ#R-%)R;2=gH7_>Mpp9jL$8A+{Cmrto&xUcc=M4|rcm9Q5* zCV$0=Ni~Y}u}L}(At{uJeB-w$dLGo6L7^=~Oo3l1bki}Td4ZFM^JlJo)(h;q8^evg zja`H*Nxw=%_q$O$HGK@h~GhZv>epnTL7n^AxU*%JhCtd_)yYDTBhRh7*!m& z%cxX12miD_w!6pzwVKIlkP>LlHQ3L2e}By^@;~#2F6l)b$^m(AF!d0;1BeDP&I#9b zPmpbr_=-?gL_?J0N6h@WLPuMTQW*%X>jeF!wFuElW8GAX)yxvSv4Ugmt~KnQSkRrp z<$?fR65d!7QY&>q7)rTwPZn57*Qkph*WA9Cj`-A46{q_bV%kymn-m6&AQ-;2pMT?? zxv5bRS!<(RP{8-9ylwkWfflqr4Bjq3Okc4?pqIH$(MhUR4 zgnIcOWhpC0b1;bOh&q-?u@CDP(!Bci*yBe~t&al*TVWJYs4eXwH+S!uqklVc#ucPr zs5_0p&>`zMTaEKthzECg_+^16imqSko_!}Y8^^|yoFvXpm)J;3!5KUteK4x5cTq%IUhWO+s01dT2y?D>H3jSaM-FQF={EQ$ln?Zc#BaZ%RT%PeChLbYVpGaDGFQ6AJm!*JoHLP}Z)3_@!d66Z&d*y|~r&GQ-AH+y@0XcpVjq3;0 zb+vk=d0pfzkfC>1p^3w6Q`j%<-J#16#KHdJB}=()I@RscZ39QaNJSk#Pb^t^l)TqiP&RMk-I)|evfHdp#!Ovq4{}*v(ClM zA?L30oEAZt_apl@Me)fWfzcb>)Eic0fK>zf|CnK8sDDfF;)ovrnqH?9F(?Z9lhoBF zUe=hwd})xcFdw<7;u&mDy`QiBQWr`I2-Hq9YWM2$!!7xGHJ*FC)p+9I4|9NyA6hpT z??7vVGDc6lj`U;BaG=rPn7q4SALm?jP^k)9VTxB7dy%t| zU;oH>LVqv9FT_ez$ze@E)jjYybuzq+cOoIuwj0?%wFW-s76%XC-a8!A6WAzgt7MTQ zuyYLtS=}N@J)azN(*@0Ee`KfvsTbEVsA0&r?8ellvXTqN@L@*axBZ=s%#HnF6|!x5 zFMAn@!GT%0HjiJr8!uwn5t6;YeW^Mu9j6y`Yk%Ti_;Nyg+0P8U6nqcrPq!dKT@qOH z*ZnpB7w)7a3^@!4w>uez%h-%|$Zl!WGdKk1=sWLwr=(XTY zT_K*qM*WpH%3FrwRi+b#!B9A@i$qtqfk#(hV1o*bkvdf={Mke%hGw99=F8m46Mr#A z=PSOqN?XuwWo>_X--`=(T93YQjrK_M@uT`ho+ej@xuReqN#k|46l=CK zdBDWHtNGwN211hq*bB(LFR(L4u!zs}s!cWz_DsrKwm&o{QO|)asHr*%VeR3MpS3G# zb-yf=(Y0N?1~#i6OidYi(+48^)PK@fEK?+$7g1_5d{f^fZJBqoM0ZIZ}FR$Xb|vF zeH)R#fe6BEgf!1Ky(Hn83E-(4*8=F0{%)fPY|V61jBK zup!0T+yv*`zbZyKSZ7vUwERQLUyicq!J=W5n{%EZ78sZ!S%449_u*1TzG?koZ4c=! z%-YODYKps?`q$LsU5$($Q)A%z1JIR=uzx;ppuzZFJ*ilcFv} vDFR)h{xEUMC_}k}n@Z?Rn@03`mSpW9Bse;h9W&rx(^+Hu-`=lud4s}q^z+#5 diff --git a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age index a28a1c850ce2cf3b759f62b689c38acfd61baf80..903babb027a234a73f59dcd9fbecd32ca1e8f4cb 100644 GIT binary patch delta 469 zcmV;`0V@9M1M35jAb(OwLQZl+FkX=Q0|Sb9%+a9CJ$MmczIPj+i{ zLsnTtD2Nm4dTD|J_QcM2^n zEg*7tWJ5P?D|2KtL_#)9aZ*8fGkQdEFKIDsMr<>8N@P-EYkx0hM0HRwYi|lV-K2E9 z)#xl{U!nBpp;2IU5S(1Ye#&n%FKYnYb2ie7E@Kl%?Y)4NhfPVoj06*?id zd%J8F{KEN=+?;Wa(_X5zKxJDh@=sooVpDL0Z;56nmf7QlSs{iH0|ZR> zONH(Cl#qFAzEexTBuT1l%|wsW?6;A@p~m6A&<@(kiQF`Y&+;cacAhl&^V*;jJw^O;2}-t{uIYX#T#J L*6Ss_$t4OTl;PF( delta 469 zcmV;`0V@9M1M35jAb(Labv1f!XJS!fdT4rKb2Cd+PjO~&P+@j)R!Ul0a!*=Kb3}4s zaC1#nSqf%Bb9Qw`N=`vdZ*ELgPc=(TYh*cNS#Nq-aCb##NmoixR!K>3QEg>;V+t)T zEg(WeG;%O6Y-)K>Lvv+PP;yXoaAr$%O?XB%cV}r&Og4H*H-C0DMM7jpXk!ZK($1Im z?qniDRz~HUF`jJ`uR(w8#>b+HBiNqiU=G1jZtI9?2G(8fBKf7N!hL5YfXrm3wAl6B zE#DS5V%ZcIrb}jwoRChPN6IVHoyla=%Zkz!AW!jmjz;>H!L^!8)kU<60suVQJrw1q znLF+Z1dGsd6@P*+X&b=--?jppT`Ei3Lub5sQJ`-hOmR+t-kbMl9ZER&HcMOy3Tt0Woo=l7bTi?VI;^ksZFjdHD<6`2-8i7^rfjwjg+TjJ%K-rm)| z^(ff1Mkrv@O)%k22ine-;lw|MLr_K&0&qfe+G>@%*G|LAbhXJa-pNtE(uo~n7ep}# z=2(ok1`JLQw#7?|d5v5ssXB`zlx)wtpFS4P`M41UwEB2k?y8Ge{ zRh75r#!e~vJ54*4!Lo^L&Z*lCTp5<~+c9%|idd&oJrQ%cTS*#M4)!f{P2<1ln^>gFR*pQ6Oj0@>_Eurog=sk~E3P1&a4t-7DGM@cS zak;byThf*fLQ?mSb8!f;59Jm?LE=HD!y0!Z#%no{@9d+*#kv(wzqCRUGk3(`=WtSg z9qZ~+7fp!Ww7*S?au(l)_lvB+Nk!miVbS5OafZ&(h<~>(nXaGqj6u#F($fE&%`V08 z9BYK2x-+EtTv~kaIk))^ZAEaKSH*MAn5KoLFKN%Bx`yi=A5CKduoosK!-h4>2p+(| zeAEp^av31ZlM= z4Ye=-m37O3L%we<018kT^qz zHW6t7+}thC4FSv~KF+KQ3lR~O8C|Lke6$f4Tcnsm%;Vn4qmtS+nOH_)Bebl5NbPmo z)n)xhJjE6)e59e=F6}NA=dObW>`- zqJMPMc%4WN5gR##MzW&1GU5iqgBp2txt0Wiz4*~|7WI9;P5d^jEEaCrF%1=kK}2yZ#`8kC$|ls8`pEi3T61oOk@!6{41|>x?3B1D#&^m*8{w(bL!-i z_PeN2X{R$Ee=LI`v8@W-v$QS`IkYQ&?tdh1tJ=}+8%($a1%EWdv^pL|X%YmW?!#{m zc=2~eyATzl`-mQGWbVKOecNoOD7Nwq6lpJlv6pz;)71?G8 zCsNDU#|TEjXWU^)4X(=Y9pzWq!;+M(T-01PgF`#GB;v9-$5r3_e|r}9LZygo41b&B zbAx+`H){cObW~wb5QfrU#mhHh+4RFs-r%9vOnstG`(XCF9&X_`qU|~Gk=?j-wxT63 z3YSQZ`Mwc#?YJ$Eg0wWP*pJhQ$|Iw1dsas8kgqLwj9RW0?`n4>IsH^9+YCoQq zYHP;sHKD@%1hMgJs*}X4gJXcT_J0zQspf`SW1%2Ro^jIhFxo6}3Z^c_R-kA*)*e4P z_t{JZ7VK$zI4LMIbc`p$^V)Uk#`{jo7pedmz}c9|V$VvWEQ|TmUzV_>N&I=NsZ?xT z8r8SwRrBxB-0ftx{;=?6!tOU6j0b#gPukVuPV2kbbA{$E7Je>e$ z19HXRQIfQ+n!>BpM5%u4bZ&*?LL~jX6|BX=r9=X zpt}-uhcq#&xAj6M`e_zXxU<%60-}~8m47+1h)R**p%qy!HDq(K9e+L?0SY=tEa`a+ zxQ2MR7Brtmo8*y*bWpIo-oM?~6ztJ&hpa*)%419xlYlRx1M2!u2UeYeJw|*sBA4%% zi64VQ!opmSs08iI*sBd;(zzK|22S}iX)KZ|UPDW9>Iavsgd)T015e2T2_ocadhOVq z0{~dNvGSi?kRI6R0Do?`5;LwBhrp#m0eJc)#d`jOJSR|Hn5AiCJp^}#YtYa8G(RY*h-AWC~?O z=<0waddc`TI6B}+QbE5;04@?!AN@xGq<0=akv8N0hj9H{ejPR#Ql~q|=YC;9Tfn^R z8}_!5JDTdZL|(EEVBM~29BEGz(a42-;h|pdfUckigDccH8!aw7n<-%o8#HB5?0_lnMz69*nDSV~SV1P$2L0cFmaY5|>ZO*@dQ9DlpB_hjWd4qPwe{eb)42gC=dQI?}$ z-xSeR5~kGoPMB_%1CI#cW2mzPp30yupF?LGE>%iEVT7hsT1;;03eV!}1ZKoQrK+O> zCI7iSOHZIRBw0f9nX=dsW`T$J_LoRVM4SE~*38p?qxfl7wZrOvx*zXA1Z)wL5zg9o z&wmTtQb;w|ACE)vcKN>^OH+;0E2dmPdYFVa13+=bPA68I%}eZ&T5^DKMn9Oy!ow#x zdqwMx1)W8d!~>EWPYX(ENMTlsQ=j(isiQChtzmx|w2I3o9tPY~sJKHz=Gwo|H~R=J zy&ynU5d9E|+M%y(2`kdK0H!fOdjUhSsDGC;pynIk5UDjjPn8NqHn0>^EX!mEGT(7% zO1~zS0O54O0P9fcqXGML^SQxzwTEI^Tw=%C&%T#x#M7ESgc6}o1adz-Hb)nJ3x@p# z8i?ZcvP!8afCqWDJ~YL)e5&H6ppSx7N5DG+cFxf(jA5(zNwS~@7bMEfd?UC84S#gQ zf0#Ank|#Sd=O4lXqzO*9<*0O$_bL}ca`tCOw-Xmkb|^i}X!S`vROoHcQsp~C(N>j zoJ-tKi}pcX?sOeuv6g#9Y$s#K4b<8$2M{FE@N%~)Ti;i7D)nYWSBwpN z;bI30%1@c)=vijpgyl#xDu3~VB(#@{^_&U!qTP=ObRc9p4^#;=o{GPPsnpIpM%syv zj|=~l+9#APGWg}pJ^`pNfr00cgD@CkMUTw|sT3kEdI7ql0NfPR3NY>`#nQI6#C2kU z?7vV~)EG&k#$Rd;W10+RraQDJ-pk%t^*tc;KBV-O^mG9?CMywUw}00CvJjiBc~>7$ zi$1f8^t~3&!8aR+pC86>T%;ir1HFJMrgnHHwTt5Sn7@CZFNtp!o-2wH3i=VW;6?z5 zGCN%-&xZmn0R%>Z9*wnB`|a)a3yuIa6MB@#LZCiEWlICqfObf4ADyo8ij#_r%q0AK zVQg(GZ-EHWq-cV`sSQc#WggHzDMk(N7xO~k(-=uFSI+#HhWg&z1)C@7ETig zH5~op7$aEke>`#onDG&n7}k@9R&Ik3j*BZwfH7LU^na(3VOX8B{38lMCct?`&L=m#@=2*7zT{$%$uMx-K;dyMF4-GiIHX(13$c< fxtRV{K^qvt7KS=PrAA;%b87z_v-M)7nA@<=Vs3C> diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age b/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age index bd0fde17738cd3af44f29cc15ee2a54aacf3f746..bd4f58d8ba0265027d6dfdd1705b63f1f6a2a15b 100644 GIT binary patch literal 4036 zcmV;#4?FN-XJsvAZewzJaCB*JZZ2vKEaq*~*t-zP!Y}J`3rP`ttUeM8NQl*R6p z0dnIgnC7A5pRFli_;yO}&ivz;u6M^2NtOtRmSh;s`!)17TpD31VvPu&+`(m+V&h|T4^z> z@&rHLcpwbZH{xu$gFX$tsp7k{(#%+jmQr|01Nt5nC0BZt86e!PO3~L6PS#jf?|sd> zw=LfX!sD=Yg1-*La1^Ev*8wb0OPTf{H^|%dtED6>J{5k(?sQja-Uev|s=Y}_CI*d{Zf zN#|NGb0BI(^VYO?&-XuY``ird+MkpKS%@w^5Yy9#^61n36r za*M@v61g*fh}yX^bWaMq&aePle-;d$*sdhgjqQ3h%E8uP-|H7UxOXzxNjm_b)!~{b zqnki!=Vynzxojh2aMG!pL&wRB=Fv-oiy8h0GkX5h+hb{xmKF*({NE8L1J639`=lx~ z=_*SgPg(3gZ=$N0pig`8#Bs7|te~c@37LT^3WNnn2ftT4|3N~Z2y>-AWBU%HZ3Tx< zDAJxmWPPi6EZ|Mrkg<#)M#hCaY*CpHYZq{#BQNVkMJ!>Seh1^jf*GFY-Pj}+q_=q! z>*?uC=<0KF@5(<64mB4NKix*h}vQPW^r4+2gj zl*v~z?C^(yF|)*L23IL>FcJYqrnVdXev@AEe3Mkq;IpG%IH+r@7iie%t7R|3Pjm$H zSP_A7L$N{*L0UmzbXhYwJw6eB_J7vniZyf(7dB`2gr#?lZTMB>ZkR98E1kUdhji$C zi9?>E#?U_UlFDYsXn{G9M%YmE@7i+`c;!?yE^&TB^+{%JRZB}k7W7JP!tE9htR3%c z@waKmMdVk8SSrjdXME%$A1jW+PIVEoHJiczsCgTpbO z&2}Tp2+kUYcss8t_rIjrYQGs>iwjmboxoWwxgt$#yoDuemU~?Z+RMl=9OBoPfUw7R zYm-k)X6sUAKt;v#Jp2%9$Z@U0U?WDQn9V2=Elp5)jfBT0n8|uVw8Ln`nt3zN!epFc zLoxWR<|6xFQOTX68L;R>RRXSA+*Z-PLZ)!i4vopsKD3ew{TeL^W1asU-4s6t@ZU@g zWq(xojdegoYk+a4MZP|ZP_M>{R5fd)P=cQ}>uK1#3rW0_3EfSJU~PCmY!Fy1Eff#V zUTg9+$Wki6R~sc5vgfW_!lqU<_LJUed3M$cvn!juTu+clmmtn*j*Yc5e3*)wnF#XL z;q~d6p@uGP-0b$%5KPw0y|K3uYbF}FptYT(f)-ZjWKk*Y&LGyr&CC5P95 zfM|^6wnAkEH@)Grg7qK}4e5Poel48gQO*Q~z)DbbOXyK>?xR1PBXEkN&&!{T=Ew?v zthZ*qMG{gAaIecG4VDSknY8__2s!g>wUzA0c>~%80R=cZhd`X7QIsHAX^+`1$#rrG z)m5Mwq>kBSY5NT^TljItDea+)K2aPvHw+xi0~+f3rffmvaCCs?YwQlnEPU#eRgFH# z`Q?J1{{Jw2uGcD$rd9-vs!|6PT3R{i?502rJlN}g;8GRbQX~)i%GMjX=7iGF?}>3pf1Zh>!H`I^t>xQxr9l;Dix&9ABxXDu9$eo;v&xmpRZDD&? zW_kQhCPPbcDqa8Aob#A-!N(5A>#yQ=F%1M=OkfR}K3Dt6p!*nMz5C-x$C0B+^p*0e zRhe7%=1KcJ=6837SX-pU4cv|zKXl9)kH?uHkPy!(7g<%>^UVAX0qPY5x4fJGECc4V z%J)@!0vxYV%m-a*S+$6NY&H}QmwOvTh6(-J5}EaGE18tZYBOt%}_ zS1-rLvYm(7nRl=>$Y`z6gqn;R*m@YtRk04ThwpkObu+~bKQ|o?P8YAV5WID)B;m?a|~^NlH;5-u;W7n4{oRKI%T$L=*cU$9z^f5M?Sf8|539h zcA!(%?k#J?1=7ABn>Qvqx(=t(%nP~CY02f=kBm*62KHs$YXwtXfM@e+(yt{I5CqhC zpx($<=*qW7f&x^f^;Dg3(@2rZ!LOD|Oz`Tl3NgJSXev_$}xid+4Okfh=9{&kp2XG3I-P$KnEVZ)KZT7vPR7V8xM!k%L*IWj-Yz`CUr6bP;Zg zjIh6Cf49pC$>O%$aGiANCduU1yAEqtzc+Y?d!{Q{knWal#gidL__Z+Rj$xIeqMRS0 zTCdHW8pSjGkNo2hs!yOAK(Zi@yi5VI7!c;!vt1LaKF|M4J1N{U1lG_|(R3OIp}wDE zIrKLfSS1d-4>T=*k_^yN!25gQ%#b55Iq{Tpf#AykJs{c{lBUT`)}Pz zP#D!Xv<$DbqWGfdx_U~^3OR%18=D^sGE}1~3UomaA8x7bE)suylF2BSo@EpZv$VR< zbpJ9T1+_Yp31T%Z=kzg0tGs?B@sKgX#DH9$Nxp~sFj}NxMKYgXCNmNLrL>FSh{gw2 ztI$WWfJTtWcy`8c#;-zO;ldT4?f$ob(!Iw_;dAjU?v&GI(2_#ya@u)x6H4R1g< z2)-oTtL@biQNJd4EdOo*S2)eV`@^^%45<@SBn?d*!F(4ex)2jw-G7B_eXIJt@rA?? z1ZAexLsX3)nyNO<77 zV1LL`KA}u}9!@4M*Y?tqc>LWoCE|_^j<5gvwkg;7n$Vpn0hu4pIenvgfzCF~pgw9# zkOh#XVl+Z|{i|Pv-fwo$5Lqqr;^|4d(3|F79^9Gs7A5C*RR^NVP7imUH}T&_Z4rM^xyE=;6OLOby3X`j3?RFNOuZT9x-JQXU)>fHqd?zCWQY| zieifd+8k<0)a#W!SKt*p%dDx7&s_Og+AS_1P`UXPiNynX+r@v(TDtOShV{*DI)lEc zMqf_tb%|yCHE-h^PnK#6gqYWTYmna~DqW}WH{oTNobDX7`I=U0<(X|H<^E2GvWp{+ z@p!0!4WX19NWkSfgJOpD((T{8p0w8E<-1=!08xhjle%HZLOeS-Gft50CFkEMl~&22 z=+X{jNhmyTwyubxW5{{xi)smW#F|7yVZT2G>mTRI1|TM3ar~M$KB$C8+ zU~*BA*_v_}#a1Y|BpsJ^Bs{fo-;;_H@nsd2SUAyg*@#uN+s%pgbe%~2&Fe0bwCtVv67BrC2jf|P+^0B6^o%WY7ll4d-S*h+2+&2A5epIW@A$a;LA4NEc6_K~@u88TTZpOg{oJ4SH%?7> zL3c-CHZf04LPTU$GB7eZLo^B;kY$mr!A?IY*Yct~WX;l;Adwke;-NSUM7&XCHPx`S70>mR791mXL&oC;h`3g_NQ^N!w+GNVTaAAY2EDZCPF*=e(i~bBT%M!T9X#B8tBFt;LI}fx23yqQ=DQWV{fzG z0SidgMewM-de3)9aQK=N1ArnZRqZqbXPWuodPnb&zt_XTX{De4e#hVp%%xoGDb)$b z>{k^J+-ijgM4#cQ5Jh-yI<=u=n}+%JuU))dLD`0&)9j`mg*-@2Q-Hy5z%T%CPKhPs z5K|A!ep0=zcAmhceEL*sw^t>(S#CKz`W3=v7=*9FgmC;sR*4MV8O~Glj4B7HDr$e% z#AHhs3s{0`vjS@!sc!Lh{XBBv(NsK>fT`lsQu;KT}rzi+oHt>n!smwD~F%QY7cA z^DW!ZZkGDJfI$<4%5J2u2bPm?Je%G`cu80fj8A5dV5UtXksAl=c&K1PthrL|4Fi{B zMuc-Eoa=02H2p}?l9>kowyqj@M*>il$mCUi`js=P`R0FFlcqu~H_a%6U~1`m0)`5K z6=<)@9w1l;78i+2WHYL7*Gd=p?paU%E|=P5xYH_3>rvv9z0n}jrDlmBQJd1<+NskJ z9mj0`cxAT|7Z`g3HEltT0a>h5j1pkPS#S?_jy7*=4IIUoW2Pa5mJiuJ={MVEXEKFu zv9npUOe5P~Kj(NJE0S1t4U=`J$^@9Bd;r{|(472HGq1fFk*0}APyI9rG0CR8u#6A9 z-KFwWR_VY`I*g(r4bnwP%?eSlZ{A*;2+XvuUoa^hhNAhpygK}Qdv*)LU;p^6fj z2)P}nO8lhJw4#68Aps7k5DgZ@NKS#A%lsdLd&%*q8eYZ81O*#(fNNn>RdF?f=EG=> z<1c?nRk79qPP@(aYvOn*Q_}5D<&`TV(wuGZexj*4W_Mk1bURqE83;wu`%<6+Z5G}k zmvI~^@`azFvgY|tDXX4YwWg!FBIzyIE(8VXJN=ZvlcaJ!Qh2IPy7YP}bfw|?7{5Zi z+S*;JFGBNt=o#)4@VX1?UVPu^wmOc~^nO}c1U~aKwn_9fFvxFB2zGw*aG%sAuBIR- z`^krh5q}3`74$z9s@z%&(pC`PA8=qae+D5^@0@3P{&G0b2*M??tpOqpP&ApfTZP-5 zac7|m+t#K$PHcduiQu@zjNp5OTbYPDAbn2k{ll~xB4f#Z3at*(IF>5&kV_zb1$yi1 zUgny9b~WK)i|+OJFcAkkU!2@POdiWT&qt${^V&>AV);{ztJlDf9*vku(q2gLD!sG^ zilg@Z(5imwt}`+BH{hFI$glZxCV zsH4_`q%S~932>qoyW8!Ox3B?Ku+5lf89xZZ%W9kAAa{A~@PR>$(^@mP zUh4y&nmPjzOOf&Bd=fI9(o^X$Eqs^*Oc?=P??d54`rVNFLQR zD_nVyp{b<(xf9uqe%`+K6|qhNw*vFo2em9R#NO!IbnX3Xl-X-$Xu9*I4_oLB3Eh33PE9QYdnx02*V{WDLEulKM%N0Dem z0Uf?gr%3>l@E_g@Sz6>J+Xu3CxgJ{1pNDK-gQOTNfmAa$T13H(cHk1I`w~PReT2@x zzwH?79#CU8@Iq-e=0ld+9)e_~oE4;Zjb~QKHFZF>F)2wOn|Kz~D(43CYENGBTjh_S zIN(WQH=(NB&vcM+EL+p(m_hoTHD%ugP*eg*?z?&W-wN79r8MUxxM9zK?iCpD`90B! z={27OXuU4S!)IB-elCHSS3{9p=?pGMu73F)No%!b2dD5trffb^e-G^oLK2fTfQ&6G zIW`vSjuRawp`IbeaQScV`Q~>!+TMyZ4+Q6#zI13^%g;u%x4? zL?hZ|&%Hm%)*+im|6-vXP+cuw!@>7;!*)|y0dOM5aro=gWMBaxw>#90j#>`L~?8v`;)FBSowK`yUC0!IStFmT4k;W zYRkM*rS^w;uasKy18~8#N1|9H>*7slM^XKfFwU zpCa&5<)J&i6yBY}Mn)5}%OzR0upf{ZGgcsa{4l?y-G@ZfT!_A{;yo18f=N(n&`V*a zT9lk=D_37k5x@ChZMp74n}p5UVR$?2Yn_k9Kr8*nwio`k5K$--2yj$8v=5UYBS^h5 z# zmy`)~{7dkjObA4KHl`mABl&$I3ZnJG5JzmWi@H#J0HK&)%fYO_gl7n_oy>h|$c14YGxKt3(VwF(7{zi_7p0uZK*f>*s zoG{_XGGRSqAlBl;pWz-@HnhYJ@5|#p@54gv0Bs5rPRwx+uw?Pr`Yya=Ax!EvgMQBk zzzvxFrVr3Qb5#|lQj^4x8oiItUVSD8f$w9rbajzo>Cs0Ku<0T!ERat`t z1+4+Btg@Ok&uVv4E5uhsuBEAicFDaPuc{V=ozO#CY1=%^il+DCQ>P~^DTL6;>i?wW z`eknOxwy3{E)fR--we&WKf3hj|7dm$ml}5Y22HY54n+;qu$XhXj}zF6A^JsYGDckN; z$Aram2TKZ9;7sLI7M=J1B&&4-=)>w$K)y!p6PH?<{myrTZNcdl)bmI7pf;D#g*}d0 zmOI=SE3geB5-h!$wNSf423>V?qB9f7R35B%nz`Ahl#p|9B4a(quq53_S$e^!0_}4C zwra?=hmrewM=!}HM&?D>*!9R%yaZ9Ag&vpUcXFS6xs)?YJ-*t`?uG%M3uL|)l6#sDr*eqWSQ#R9)~`xBpxHY$*? z@$)LGNLZTtWVGb;t739VWiwq1SLCy8$#69;^>C8X_@dOQsLMh+<(xv~MoJin8^8C@ zX(IfrB!EGLEg&HwQ$6oa@x%bD=lt{JZi9>z`mnw;&O#)_p3o_-A_qNp`(&6-4#-xn z7sA;x!$;5YQEZX!jpp%>Z#aY_vCgEWQIF`@jD__FS~!aLZzUTNrBn_S+D#nE20$KQ zpY#O-<$^je4$_3t{-fV|g9@F3QqSD8!RmVeR7%f=ES#|9Hq> zV7Bwdsq!S@Ko4VBL9CeK>p9D?XQsK&%U+vahJq{l(HCHZHb3+j}s-vDRyoWRVH3WQvcO! zi!rH;t(fEe&jkWAlN$KFhihe~SRpTkfRB*T52?eooOxa;14g2gChu+p9N+6qNcvNw z@z=d6DnlLEijVzJm%|rP%v0e2dMqOEKhj%2~es2u#@Id?ul!UM%8)H zvyrD1sMqkLjftfAmHq%V$Qzfj&iE@kIKoUpy=~4X`}a3WMWs;6O(>A2qUjv+#{!`d zWpwen!C1wuIAoAYG7W!bJn9>Mw+7aKrVbh__z{Szsis&~ln0S?RSmI^f`^RO?acuy&7$*Vhy&??;MZdgU?Ibki2R7GJ6bJL?$a&84Jc& zG>T4|2E-EgZyP90^3zzQ6Jd(kOr-AUj-e0;H&GuO#b zCQw)fjo4`dEy3MZ!_gxJCy;401$4DB0clqBox>qC{-nt;D9)K($O|ql%p~4GvfQX5 zevz&;Jv<2R4$6UpNG=MO0qG0}38S*LA~Nbq4lAaWQE`(Blh;6SM&rQFebl)UyW}*4 z5BPH9rW0!ZjGLh6$jGC{=26WTl|?$0gdpa3TT=yAApur{>t{TTCw3TRejj8a?L$@8 zykqMQUQ`z*xfCertY8rz^wPoq9Ggji=2hk^=ZyXES3;RTR(v{d$1{MRK4N;bV#?$j zTt3zOVQsw3x9ktiMxXwU-2JI~MYxY+BomHF%6REMU}ugV4){5)#l7*R{OG;^c&5j` zU8DnD%{tLF(PA^SS+^{vKoN^)`3CCEH-g%;C<1+rxrBtPQVX%4%`3QS+K<`2b~h!E qEz9oaXdwZUJ)>;?mb5?&LNLG~#?;9q9$i#MC~m{)(Xw)x7`mv>cd%Ii diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age index e7407df04d4c6421b89337caff3a0cb69b5b5708..bdcbd3cda81ff4a2552df48e2196a87f361459d1 100644 GIT binary patch delta 567 zcmV-70?7T$1k41GAb(F$W^qhpPH#tMbX78AN=9a9R&jN7R&-=@PBKePWn?&Tb96#f zIBH5Va|%>LQ8REWYeG_OaZyoWGHgUbD=|!3QDIJ1NoP%HbT2DxW>!O5No__;a|$gj zEg(5XGe%EJD_V4EL`_C^W@IZlb7^R2O*TYkS#&i;PH=QiFn@G0ZcagQcW(;%2lZ+* zI6V5nvE}%ujxbI#S9{@!D*d)joL^l-2o$=mtOg-@m3yz%+$(?4@+p}2Wxv{xYO`-8 ze8;QKr^IvxG8Ob%$9qaG0CKUB#0zDXjy_)Rel3kDlVx>v?Bqjw)A2UL@@_L>?=PFq z62EJw_(||nzkkQ7uI;jx8i{HTBwgrxutqQopKzktq@|?k95;Osu#hZI4X>_{^qy$W z1?ddq1IGhJKjMSWPYX708yFJGi&`uhT5=kAgQK77?K$Ne1(n$`zPRoD^JOELwv|Lf zx6#MG269X9>CzJM6jdKk>nQjZ;Nh5Si_#ktYUyd+Eq})}`SIa$FeB)L#SIxU=mZWx z2~F@8nt#I+y2k|O?wP1sz_g3UFzubmX^N3odLj)z1oY^aoxt>V%fcNQ?U)e~-vbOfaWnmQ)vCH3|e#WZz63nlGy=q*aIZRrMA F0oh8I?YZf$64z3-tM)HA)R(^mz4 zNXk%&p{p%Ij6sAF%~detwbjqd$UEB-4Aq5q(eUWZzpW4T>L-CmD#rvt;9GBu2Lv?<6 z%NJTU-Y|O}4+EO*|G0>NP3Wy50)slzr5*9X0M#10pTALP`Av10HT0zaS|X1kRYvRs F9OOcX1|k3e diff --git a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age index c76c4e655505dcfb33865ff22e6270cfa875801e..1c1b8e64f61f13c870862259d9fc8abf52ae521c 100644 GIT binary patch delta 1126 zcmV-s1eyEy2=@q(Ab%@HGjL)wdP{n9OIbHidQoauZf#_9S4denSanBsGEz`zZBIdA zI96#gRSGaOaB6O7YD>^PELcYkzJX-s-}Y*h*t!~Ijr zgiTyquFDSysU$3q`SljF{)J3%KZysX!th-fN2+7B*xpJkqyk55slaQ+rm!31uH))K z!QWEi>Y)(g3;pt`@!*7a6r9AK4eAa}S=E2-#!LoYfb^dC@>>!_gTmAQzfI9TKH6>= zT;sjd8Id8;b$?akc^ia=HTd)`@eP0?af=ZP!{=V^(o%_Bc-p6WtY*F3{+gk-Qa)vT z^TRKisj?YB9~a)V+9~8rStyp~bC)lNy%zn!&WF%U+w?2yC)NQ@ngQ%8Rr>W#S!9Y- zR(D#Z9Lub28gCg|#>94glfQY*z^I38Fgn@kNr47C(|;ZxhxG7sLo-oY$gzVg4iv`- zuy;vZU@|MEFlXt#6}9sW3ve8lxeAuL=cu$|&#<8G>Q-IxHS%~?k44pX`o{Qi2bg^E zUO@rA9Mf=Iu*2D^-)&JEW>HzW#Exk|W@*;Wo`m&(bWG4AICL(jL|Eg`+YrSa-W!#rNlZUjU1(A7qISe7``>sj^JOo zef~6kU#a$>6c#HqiBm0TI9Zot?a-+aZT5V1tbYi*9)vPQ*tk*Gp8Y$-B_`HU z`3NcuF>&GSb|GR6P1-v5! zR!B6C`_^qYIHab7L#PZCu#uaN@h-~Lh_t7C0+|9|Ob?5eLB!~~O|Lt+-xbRN z)_)?v(*O!RkA1-eKMXeG`Ct|Pe}Dh|`$H*URP`Y`ABY5if6&(UY zBGU6ikWjZ*GxI!+oNX@ zpT!H4Q98-DnK`cAlNO0&0us^EWA(=T7k>)D5(4tsQ*K4htFuhNgRP=KYI&%eUVBiV zYiQF;$ew?auIAk?8snnVK(?My@o=D>>ire4zF%{MM+4MW$}iPpH&@m%Zxm9^236vg z0k?@2GM~r-uSHe>pXxqT#&b_nK8Is8`BnvBx)08c^JrE|7T|H%NX3ZQaxqgmj6|k|aPa)W2ZHe-Dl)WyU%z>< s&?Y1>rCdk(m8ICO-EZoXCB}^OCcwF>&{nK7tJG}Z^V4P(jy9@%R^Hhwvj6}9 delta 1126 zcmV-s1eyEy2=@q(Ab(J1HE~j5F-=WyHaJH)Om{XhbaqWsXmvDEaWXb*H*ax7a4R-a zQ7}_SNeV4C% zv8EW-SL1a`^#fGEI@U!oEd8TIY@m!h5QGo~Q?*qpQYDqJTZp2m!-qg8qzIw&*CCFb z9d-Ft-@zGAe+Qr!Q_fUI=f?4`v8g~2{>SZ=9^@^EM}#<4iPOK?Ln?SLe0H+dQn`PvaoeB_5P#s+$Y}Y?c|OQ!XJwwGBccK2-~T}+8NQ; zff@k*a-RIh^E;?@GO+)GSJ?SSGDngDuNl7wJzNrl5F7Z}3l^EEd=I^;>07HGq?|T~ zLn%~$w4-Fj&s~Jocgz9s`)l9{C`KQ~D%C*xh9KqF#p-TsksvBdn7E*oVh=Tc0veCS zzU)%crGL$m18v3^ERuNEXv07^dHiz32CjlvGEeH@Z%EU2#R#|!l3|SJ5w^$;#T5TX z*Lo|Z{!r^SvBWxwUHeL|$*V7S`G7Er3I6i~JLA%&N~(=t(_|-2uurP6h<^->K68q4q)mn%u#O`N z>RjDCl+Y^9(8zhP-4Ny&IcnDGV#L>IDpzWDFH^K3dnSttG;tsGe|w;6T_bri$lImH z6MSjtFk>#KjMIlW6gr7|)8J9rvz>u+xHF_dPz!_W#%8~9TzZW{orM>}-%3@<^gJxml1WQ8F`y_vp4x9_a zV#m$T5M{C%j7CQ64SIXufX@X7qF%+NOv(tUvGI_ETU=EeiSWI^KWH)?t@QGv%%1=a z)#xFb)=Z2jU|~nxuP@Q=;YW1Yy};)9?SD-ZW;X_j0cu)NIX5*?{fOF*rv1L0$IiP8 z>_L;@@AlpPnl>AU*0 z4iVrB44ERVVrg#|4e+4-3EpB3ECC+w_#Mt>8p1F?2|4t5w*n>jtGup103|nxO^|T>t<8 diff --git a/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age index f84eb329b6a7f428895bd8acc20532535eb39352..af3743ace7fc117124c8232d7f27b66914d72883 100644 GIT binary patch delta 573 zcmV-D0>b^$1kwbMAb)BxO<^}UNijlUb5Kq}SaMTjcsF%5S5HB6T5M}?QfMz}WoSxv zT69`NcM3UpM^!UcN>@=bOjdYjXLV3PML~E?IV(3yL2f~4D|be4LPmIMQ!-gZFbXX# zEg*4Ybx(RXRBK@~MR#vUO=)#VS8FdcXm@LIVPZ~1SvOWgXMb&CS#owoL1zkw{G~km z@hQGL;GwD_*YZ&aD@#pt7RC$0<&oc~kEGW?2DwaE3a>GD4}#JKN6*KzQ=mSpZU0gV z1m%6a5&_C(DywgO_5(@m*RMc>sS+`}h9`OZ1=HI9^cz$~ME-vB0RKOqx7YmQl}3%> zK74nXZ9Nu241b;~{2f`DtBWXf#Vf~zgg9n2`Rr`mu`*igM^q>+2Zo+t(}1j-1Y-ns zxHw>`K8&YRixKgI`DeN(Z5LIn=r5N&A=Ft zXFo2tY{TOBf#_0s>p}~`(&nKCMn##IfUI;noq2CkUVl*5B`*k_p?WJ`nRAGe*f+qW z%1bbshPmBU6OE(tQ3B11cgUY2Id*2$O4$*nEdhlncgq5dtcN?c&uAoRM_HNNkjLC` ziHh7~zMTyONg&1jn86IXjQ}ca$zG8|mY8S#eb^$1kwbMAb)UlaYQwFVN_%_Fk*2+cuO^9L~bxyR5DgWS2u4{b6GHQGC^2v zGBkBTI0|M_D{N0%Ohq?zH&aJ~V+t)T zEg(@tXHrmTHFH#XSY~5IIZjx0K}%O-MM`>jb~rF)NmV&wdVfPtX+t$oOj!zR>9n4M zQuYQ&skTQpZZO~pMp2v(Pdv~uiEkRMawr+!^{ldboy%hE%}!IxMRyICcl+{M++is@ z3`Tb+;xC`>@4m`)`>En>mZBFy0v~n6YVS}P3aW3TbMc{4rssnY<$Lx6Jx(G%daw!5 zVII;UP-NlhL4Uyy;hwOHp|h`?0H$stYn)9Q>n=!%8D(^-K3b0KU7T8zu0b-U!*w=R zYO?L-)dkCpo)KBD(V5=NmF9!D88cwEOZ3sbq!t z9O(q06OCT9(C$SaD{21w(yYb73|$|v9dXB|<;JgfdVkGqg&S^l1VVjFR*me+5R_wh z_NkRLiOlF?7|Ag{Z|wLFcQN-ER3KM8nsRUR69RBFr0izTh~5;VPBmGJwu(I1uSW!) z%-i`G(*J{VDM2F)&O8HN2!K-~C8|G7&OA;#5g4HS;e--Vpp~0iVmB`t?Vmg8D>DPq ztc-gzgEot|SydD&qRd-iRD7!nN^#sqHb5K-gF;{d#MmR<{aB@aYYF0^5W_V#WPIp97PB39lYJW;+W;9P~MOg}u_Q{F^ zruA~Ppg%J=26Z9L5=EtflM0K}(!jugceW!R$Kh^@ delta 273 zcmV+s0q*{&0;mFzAb(a%H$h}rbV4K{#`2aAkQ-a#b~EP)As8a9LSNT2XCpI5b5}c||LBXKQX%I9hKnO$se7 zEg&yzOL}oxZ%I>bcSBDwV{SxdQ&T}wGEzutLoiNSX>eFjLVrzWIYM}CVrL2-9(B%> z#-ToB>A=OMR$T)CU1P(hCIq`da#Ah4qj0+O0J;7ij8wd*rJs}N?qqQUv}=F>ci+z1 z;>6A)zr&aW^PUGfTJCkX1?a*Qn6#JOcil(rTzbf01{~{OZeTWl58eOvOL2hShZZ7d2C5+Ok#O$V?;}HRVz+VZ$VdgV_0EPd2CTHFG)c(Qh#n(ZFy5=ZAA(_zF>43 z@T#;ykQ^Uz|BQk zy{(Y|)HrS7Ek2D{7XIvrLbx)fqzB3}|K*{r@V3;M*Yb@OAGkrBG>my$=H94%-BMBm zGXU3kIF3KlQ-A3i*UWA9usC@=g6+p{1zh5bvNGNy&63=il0mt+!{T!s=<4{aAP=pG z=OQOU&mwKckCJ?26YW7;F68U-hH~@U*UDBP`23V*3E9507(eQXcP68D)4Xwmt*Ef} zP+hh+mKM-Nl1j=wlS72+R4C;l_Os!qv#X8Wq(%A+!tW_7r8{U1#Eb!H?|b%_n;p&BlG@nnBaf~)2U^z#F9AI#8n$ue@l_% z57qL>Cr1@l(H-;~oM=c+a+h&wuudm%X%dy| z5Pu8^tKd5YRB38n{&WQCtN>slNIXxGUkTgf4oTqd!rKFq6!?PhQqP8K#mb_^i9bjx$pShAsF4}wjMN{X|N1qH6teJ;l-8`A(&H@( zaV)Q-10KdNdj?!xTAu16wn=)@1gY}35G4CnP@Hbi{)28MLp5T~>K@nOz&&e!r((^0 z{}SRq0-5*ESXYQ%2Ww;yzO9DGV}F3#qH9nDAJ)6cHK0*<;$vGX0jj#hszHylE~a$e zd4n?KH!qBRhEF{^)961@A%E>}@NYt* zz$ecEsBm6>Tx&;FaWJpa5L5w^hh79RqVLxv9fh6);Pxq$qsRvmiM}Op6Yl`?(t~oz z#)O((W?=*x6RJ49z%u*fod4jGKIXkVG|+!X{b_%H1;JKDMSsw9|AVmhxUv47X~1sx zSf*<0zS2Y%Z*KG!g(knQJ%6!+>Z^rRUjP05|4!x0JNHCrtPY|7(B-c&?`&Z7uoZfj z`iC~=WZamuh$E*ATKfyeD_KnG_%)Fm8l1tiah#G?ogyQPQrv`~OEuA>?hOWU=raOy z9TsKlSPHX!`LHzM7DNeDmqMVJ93W6=8W|@pQn8!VoF?+2yswTj2Y(o$m;{v3mrrlW zG7#iMp_fN~&Z=N#40-c?E8W)xkv0hdok?j-UFYto>1xWJ@5j}N=+MfooB)cADM;-= zcRZ@6gG%q~@W2$&nD-ps8aDw5MB_Uya?Ke9tz2&$EWV<>4Wb3;!@v?#vVju3>yzps zS_%td+Uz((_g}u2IDbDNX1rbhS^GTp(XASWk)suf6K^znBCq2=P;2y?(LgOHG`P5f z!oQZmw>_$AD@_dvxE;_9tSX5iyHXp>($M*4+2_=rS|9J`##sn-bGGc58ZhS6V}5 zQbA>TZwgQ^NKsN{OLS8&XH;k~STuT8X?AL1M0ZkBYG!jnaaT@4Rx5ZkT2)9_Zwf6f zEg&&yQ%NvpHcv`NW@&6yS}SZ(W^YYaOhsd2S$2A6PFZ4aNPk*kdQfb2Vs8q~&h6m} z!Q_SY=;G-()|NHh5vgpvpGw#;*H5&YZ)hR*!&EcP4M9cbU{llcuqs9-zpqj3CD)vIDZa85{aHKe`|y2(WjxE4-reM z{@YiZtZ-qc_16R1HSft?PifEQgYL;3>OU6VD@7q(T_KlYO4VWZB6K#|W(MzEmtPwj zx@Zp1b7&o*5XO+f--$N%@bv;AvAv{GhlS8cpseFoZmT*J9&+$)ZZp;<25jn zdI*YVnSTpQlJaQ|Pz5E?p08c^bd#>Ir{hzl5y{r8!m$oMykDQOAx}$E!5%wgr)8dc zOxNz<2?aV$2OT+a14mobBl8`9?IXVX@QG5=FG{pv(4`>P&}Lw|@zjl3c@F}!%&C1^ zNk!vSQ?~tGzI(F`(kiV|{qFNpul})9{G-pLRQyDr{xkJk&G0%9F$>A$;Ro&coSE6F zY8kyjBG+jonM7{IrD$=XF~IW!>1Qf_X*tA&;W2Cv^Vmf|%;9!+)G~Y}3?R9HGY;2r zVSm2URA8Z7QqD26nK1% z6G&)6_1CCA*NLD4QxTZMC+N2TL^n2z4q!@+Aw|wN^exPT?Z7eLU?t`2UJoLZ^?!I4 zm53N43n$8x)0NrylrN@8$)ia(lgGa>AVDI)Rd3q6cAPOoFZ3^ z!^HC~=T6MEx_yo;QGrgG33S}2geFU@N!uufDql8U z_ZnXA4KDP_9?SNcQkw4kd7Cr(@6L&cj6)3Li+{(5!&*Q` z?4T9e?kJ4J5u<$DedfaKJa3%Ix`K(avI#s8HC5lj(zn@BNaAR7#JoOS^5T0`1{b%j zrs=sntry)*#fa>zf`J|(04c*I6RNoB_UGkW&3B;D>Sc~wKenRH4{(f8;Z(_G3KT{V z1zKwxIMY$hB`yb6k^B*h;D5rn{9#{Ja$4$5A)ngwFz;AfGNUMd3~fAJBA_YHt$8JyxUWE8FOOE|}A@Mq*e0V)*7 zm)tx?6N;b3L50Nf^6_8NF$2AT7-UWSfhP}3%iO#z;>vb>pP(yd=-ARA$dp2YV+0G- zOD4SpI+_RP2&V*(@P89ZFdY|hSTR1o0bj&yHn}m08fBdiEC%1|3;aFC=VIGQ+y%=B zU4auSHid%{fbh`L1&alcAb(*`bu)N%L@PmKFi~PExV@^YLIBhvrb4@{5M`SNcQ&?khF+)LmQh#GXZCXM{cU1~}pr1)s zfyE54;FkzyV6#n_Jw1l|K9&D25LIX>GYL9x6fH2LlaX4@E2fYPuG8&^*SX=}k4dBG z`cAHEP5w4OCjg@Bi$U3ZVM413)dAa|w5u*oS``H0E;ptGXF&Ow?9fS58Tj_&VYe}n zalRX`0UJKo@9`&Dg!E2_Bu>KmM_zB^qiaff~!%KhF#e5f)Rd=kTe7s*rzBDp=nC}TRZtCW$U-CFL^MAu4ew>5x9su-cJBx4o8*3l| z*u>6^*~~~r;d?roKRQuL z&FhDAn{VL2*Y_Y&a=MDuHURu8HBwA~wZ7p#hrv49KlPVr$_vE1ZJY-B|9pPz1X!ERd$PEkq~+;IJDPuf%V1=|!ST6^%( Qmy-K&r53o_p~t3kt#+p>(*OVf delta 630 zcmV-+0*U>L1&alcAb)L4OlWdWY(aT8cTrbmMR84QQ%-Y1PfSE)HfMM^Xm3g@dND9D zcUE>nO$s$>Z82h3cVtmVRY^5>YiKoUSz~&7V@ydncT!Dca$`hoW=J_iPcSuMRSGRF zEg*M7Hga=!SZhf)c6CrOM>RJ=LS=14aYQgxQY%qdFKakfT7N=Ob5Lh=OEe1F`$8P% zE;PGX`(-EoSKLd$0to~o|D`2fam4Ga!dSZWHlfsP7F!W|80{Folzpqpi=Uve``GO8 zfvR*CWSK=wlV4n}n+B4&i`}supF|^i#2QIuvXGhpN)=T;W>?FY}#YYcv0?WAQdlhVqJsfF?* zw;OCGdxV7JUdkESjf7CUfV3&Ap5Yd}MB9#IStBBWA3{)On>wEsn7!!kW`W(c1?muq zEKkj-f&L^;qfQcV8&r$m0{mVIxLgSFiinvBi5$&TgMYBoKB8*`7)SVp`*T5*o3JuuhG0dHRI=plLBMzNT#u7>1~>wHzWm?s|oLh(PLTD4zdy2RnJ&lBAWXjf}J?`3#ejD32cy8!mK1)iW4H z@=7Y>wA|b^Neb~GWR#=@xIDw3$a`dupp#3KYna=WX#8DBR1!|z)xk4ie=6sQTpcl* QtTQFhOxf9fI=cr=*G3Z`Hvj+t diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age index 367aa4229c01b178387abaa58e51cd444a498b8c..6753f6afb2dfceb1db8b40e753c44a5143b1642b 100644 GIT binary patch delta 1126 zcmV-s1eyEy2=@q(Ab)yJVr5NENp(jxRb*B;WiVxCXnALHR99;&cUW<9V>CE3NmM~( zOG!CVZwf+sNqKoRQbjpqGFNqTQ!ipRL@!ZSdUHr)R&Po$F<4qma#3(qcVjPWK?*G` zEg*I`Vt6k~dQ4DgGDlcKVJ~k~WkF6-Xh~B!Xf$j!H&a zhECENbJ=P)n17>#DWxswWsM=K+Tv%YGrf}fFP?u8QpB<+@Lg}T7}Y_MQU285`@Lur zh&xS@HF1wP{h_A?B_YvMW>`nOUV0FW8o+2AU%|N*TpneJ75zQ`*Nf3%NBu3bv+^d6 z619zIQPPJ(IY$$*)7+~B4Y?ZPyF1kmS%gWl-$@b^y?^P_26CqGwrh(M&rD54y(a0( zN6{Q9f^%l2*EZAL;E<(NUD4i{AbQ>=hueO3Kib(`_izm{jb`O!8E@tw#p!F`1`&t16|cW^lIc7KSAkVM&hPdSee! z3Rr(;R{a;{ark@!-+Q`UV~g3Gwz=|y*ip8#@E_#TWJ#v>l7yU$E;;{Tw(ujh!f16! z-j6$X1!ZHh&YJZpYI|ZpC)iE^Dmddy(SK=a8#MOi*|MHWr7ysL2=mP^7z34*U60w? zM_@~}hr>xT#ZXO%+_+yf37$I#j;#PCy#FB=+KOeve_v;VZJUWm$F1|u8EXNiI5ai~ zyb5Fj$kZSe=1{9LzJz1_JF#NxRd@M<`mE+DZ<>|<@*G<@1TJ;z$q@k^C8W~ia$g7Y zCxppLS-j1?o*Cq(4VWUjf1zku&1s)IV@~g8=pMJ{!gFZ~CEcc8-TV=lx%e~jSXH@0 sb6k6rld@Q1yJe3B$Ku}Jv>>-^RIUi4Z6jkS%}9zpPM2IHXL`o{4np`4fdBvi delta 1126 zcmV-s1eyEy2=@q(Ab&Y;7= zZD?m|X9_e!R(NlAFKkw2Q#EUFWO_kyacgsTa7|TYG*neiRCq{rbTeaPbyQ?&O$se7 zEg&~IT1`_+OENcFHE4HmY%^hTFKt>@M?q>YLsDcyacO#aV}Cd^c6V%0D?tk04)Cli z@DJJ(cDb8g`$PhH&jhhflIak=sKe)sySew#{CC#eob9(MPvc1~Sws#iQTGbI*OLD- zzmlLcL}F1>U*1C-Q`~edHdrN82scJ~09OEpws^w`mgwR+2*`Ejyoh%z>L5vXRWmmE zo_6l@0ArSNFMo#b**;cDX~W)~Er0GwJX!$;_-_q@m zJFWYdXfd6a_QLMr!FY<1Wo9v8=MQ7JjNrUC=x%E%y#^7%Zy}YbPhI;Ty4-jZs$Ne1 zKh7Q*sf!397q*^O&nF}kLKccFmbe+^>Fie<^y-+3tAFpC*l+eK2BcU1Wgr>D%dSD% zb(j(0#n{Ro4qQ9uPXlx$Rej7=TU!b>o<7*}-?dJU?G5XqjP9jz54y$)KEdU){gZvp zDo9QEzqP21kbqFkvWBzeezb$&<|mGE=8(ogc&abo$F8!xDPrm@tD;=e=xEqX+zKj4 zf?9x%Qh#a1tJm@YsdTaZLe8hGp9V(%_hn4&aETRO=2bKm92|#$ytjb*1%sY#%_q#3 zP0rziwH41BQs%7KJM^D|J^Kp}>tYJ`M6Q}N*>&RAhs6FLldErqQ@y$obLfO7F%ZA9B_ zv47a+3CZ$P4I`%7|6BSFJI#ZBT)_peyos0pJs|l=ts4pcsamX_1nzHn;~ewFVUNx^ zzl3F!o5Lq?KSB_q=hx%iZ)?GiMbL$Q^)81IkG407n*HuEVj9=-w&7Rj=!7Cg61XsH z#t%Iv6y>WZTX-bMU0y)CvBVX>EDW^bZht^0Ah;$l54uz0L002^9+$y!{+cS zBB$<@_GCaUciw{wr__^EwEJV4heK#ST)8pnXrR)Q3%P&tBFXxI+gn#ZjJtvTGhZCk zrsW=YIa(`LTWVA@KM8I26M*ms1$^$6jtd9WHOIWV`gm;WgQku~L~R}wTA`XW@cd&| sW7WV?HblYMLxSP2p4MC<9%qIS;daz7{ZTB+hxiva$uC13fB*mh