On 22/03/2019 13:58, Rob Crittenden wrote:
Jelle de Jong via FreeIPA-users wrote:
Hello everybody,

On 14/03/2019 15:08, Jelle de Jong via FreeIPA-users wrote:
Hello everybody,

First thank you for the great software and this support list!

I got a few questions:

version that I am using: ipa-server-4.6.4-10.el7.centos.2.x86_64

1) I need to be able to set the initial password and not have it
changed or expired after I add the user. I need users to be able to
login straight away. What configuration file or policy option? And
where can I change this for all users?

2) I want to change the default timeout for the OTP token, when
generated from the GUI? (I am aware about the option with the CLI)

I think I need to clarify. I would like to configure the default
interval policy for theOTP when generating an OTP on the GUI website.

So from the cli this is the way:
ipa otptoken-add --owner=<user> --type=totp --interval=90

How do I configure a default interval for totp on the GUI?


The term default is confusing. Do you mean the value when no setting is
provided or are you asking "How do I set the interval when adding a token?"

Is there not a field "Clock interval (seconds)" in your UI when adding a
token?

Thank you Rob for clarifying.

As admin user there is an "Clock interval (seconds)" field. As normal ipauser that can add his own TOTP token there is no "Clock interval (seconds)" field.

I want to set the default value for the "Clock interval (seconds)" when the user generates his TOTP own token. Where can I configure this value (at the moment it is 30 seconds).

The only fields available for the user are:

Time-based (TOTP) Counter-based (HOTP)
Description

(can I disable HOTP somewhere as well for the ipauser.

Kind regards,

Jelle de Jong
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]

Reply via email to