As an Administrator, I want to allow users to enroll OTP tokens and use them

fedora-infra / freeipa-fas

IPA schema extensions for FAS

GNU General Public License v3.0

12 stars 16 forks source link

As an Administrator, I want to allow users to enroll OTP tokens and use them #83

Closed abompard closed 4 years ago

abompard commented 4 years ago

The default auth type for users should be set to otp, so they can use an OTP token if they want to.

I'm not sure whether freeipa-fas is the right place to do this, or if it should be a post-install step. For reference it can be done with the command:

ipa config-mod --user-auth-type=otp