net-kingdom/sso-mfa
tegwick 79e533b548
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Identity provider journey acceptance / provider (push) Successful in 16s
NK-WP-0056-T09: lane looks up the privacyIDEA token by serial; name login failures
The first founder setup run stopped in phase absent (no change made):
listing tokens by a user that does not resolve yet is an error in
privacyIDEA. Ownership is now read from the token found by serial, and
pi-admin login, privacyIDEA requests and the LLDAP admin login refuse with
their own reasons. Failed receipt kept as 00-setup-refused-absent.json.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 994874@bnt-lap001
Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
2026-10-31 13:01:42 +01:00
..
bootstrap NK-WP-0056-T04 done: svc-privacyidea written through from OpenBao; all four binds in platform custody 2026-10-31 11:19:21 +01:00
k8s NK-WP-0056-T09: lane looks up the privacyIDEA token by serial; name login failures 2026-10-31 13:01:42 +01:00
WORKPLAN.md security: repair LDAP group callers and fail incomplete T07 acceptance 2026-10-14 01:17:35 +02:00