search

LinOTP / LinOTP

LinOTP - the open source solution for two factor authentication
GNU Affero General Public License v3.0
516 stars 120 forks source link

bypass OTP for service accounts #121

Open Kerthmash opened 5 years ago

Kerthmash commented 5 years ago

we have LinOTP configured for our environment, however we have several service accounts that we want to set up to no need a token.

I've tried configuring a policy with passthru, passOnNoToken, both individually and together, however I still get the OTP prompt with the service accounts.

The service accounts are windows AD accounts. see below for the policy:

[serviceaccount] realm = domain.io name = serviceaccount active = True client = user = pgadmin_svc@domain.io time = *; action = "passthru, passOnNoToken" scope = authentication

xt-kay commented 5 years ago

I think this should work, while not 100% sure for user identification in policy authentication scope. Do you have a logfile for me, best at DEBUG level :)