Thanks for the reply.

Yes it will. But my question is a bit different.

I want to be able to ensure that each and every user is forced to setup
atleast 1 OTP.

I have set "Default user authentication types" to "password + OTP". With
this users who have OTP, have to use OTP. But if a user does not have OTP
they can login with just password.

Can they be forced to setup an OTP ?

On 16 May 2016 at 16:03, Petr Vobornik <> wrote:

> On 05/16/2016 12:20 PM, Prashant Bapat wrote:
> > Any suggestions on how to achieve this ?
> >
> `ipa config-mod --user-auth-type=otp` will force otp auth for users with
> an OTP token.
> --
> Petr Vobornik
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to