Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
The change that you made might break other things.
On Wed, 2015-06-17 at 22:45 +0530, Prashant Bapat wrote:
Hi Nathaniel,
I think your patch should work. Please give me a day to test and
confirm.
However, I changed this section in otptoken.py:
StrEnum('ipatokenotpalgorithm?',
cli_name='algo',
label=_('Algorithm'),
doc=_('Token hash algorithm'),
default=u'sha1',
autofill=True,
flags=('no_update'),
values=(u'sha1', u'sha256', u'sha384', u'sha512'),
)
to
StrEnum('ipatokenotpalgorithm?',
cli_name='algo',
label=_('Algorithm'),
doc=_('Token hash algorithm'),
default=u'SHA1',
autofill=True,
flags=('no_update'),
values=(u'SHA1', u'SHA256', u'SHA384', u'SHA512'),
)
And the Google Authenticator installed on a iPhone was able to scan
the QR code and work as expected.
Thanks for looking into this.
Regards.
--Prashant
On 17 June 2015 at 20:00, Nathaniel McCallum npmccal...@redhat.com
wrote:
Prashant,
I have proposed a patch for the issue:
https://www.redhat.com/archives/freeipa-devel/2015
-June/msg00505.html
Please test it and let me know if it works for you.
Nathaniel
On Wed, 2015-06-17 at 12:35 +0530, Prashant Bapat wrote:
Simo is right! This issue is same as
https://fedorahosted.org/freeipa/ticket/5047
If I change the algorithm in the otp url to uppercase it scans in
Google authenticator/iPhone.
Further more I manually edited the /usr/lib/python2.7/site
-packages/ipalib/plugins/otptoken.py and uppercases the 'sha' to
'SHA' in a test VM and it works as expected. I hate to do this in
the
production server though.
On 12 June 2015 at 23:32, Prashant Bapat prash...@apigee.com
wrote:
Hi,
Has anyone seen this ? When a user tries to scan the QR code he
gets a message saying invalid barcode. This happens only with
iPhone + Google Authenticator.
Thanks for your help.
--Prashant
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
Hi Nathaniel,
I think your patch should work. Please give me a day to test and confirm.
However, I changed this section in otptoken.py:
StrEnum('ipatokenotpalgorithm?',
cli_name='algo',
label=_('Algorithm'),
doc=_('Token hash algorithm'),
default=u'sha1',
autofill=True,
flags=('no_update'),
values=(u'sha1', u'sha256', u'sha384', u'sha512'),
)
to
StrEnum('ipatokenotpalgorithm?',
cli_name='algo',
label=_('Algorithm'),
doc=_('Token hash algorithm'),
default=*u'SHA1',*
autofill=True,
flags=('no_update'),
values=*(u'SHA1', u'SHA256', u'SHA384', u'SHA512')*,
)
And the Google Authenticator installed on a iPhone was able to scan the QR
code and work as expected.
Thanks for looking into this.
Regards.
--Prashant
On 17 June 2015 at 20:00, Nathaniel McCallum npmccal...@redhat.com wrote:
Prashant,
I have proposed a patch for the issue:
https://www.redhat.com/archives/freeipa-devel/2015-June/msg00505.html
Please test it and let me know if it works for you.
Nathaniel
On Wed, 2015-06-17 at 12:35 +0530, Prashant Bapat wrote:
Simo is right! This issue is same as
https://fedorahosted.org/freeipa/ticket/5047
If I change the algorithm in the otp url to uppercase it scans in
Google authenticator/iPhone.
Further more I manually edited the /usr/lib/python2.7/site
-packages/ipalib/plugins/otptoken.py and uppercases the 'sha' to
'SHA' in a test VM and it works as expected. I hate to do this in the
production server though.
On 12 June 2015 at 23:32, Prashant Bapat prash...@apigee.com wrote:
Hi,
Has anyone seen this ? When a user tries to scan the QR code he
gets a message saying invalid barcode. This happens only with
iPhone + Google Authenticator.
Thanks for your help.
--Prashant
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
Simo is right! This issue is same as https://fedorahosted.org/freeipa/ticket/5047 If I change the algorithm in the otp url to uppercase it scans in Google authenticator/iPhone. Further more I manually edited the /usr/lib/python2.7/site-packages/ipalib/plugins/otptoken.py and uppercases the 'sha' to 'SHA' in a test VM and it works as expected. I hate to do this in the production server though. On 12 June 2015 at 23:32, Prashant Bapat prash...@apigee.com wrote: Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Thanks for your help. --Prashant -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
Prashant, I have proposed a patch for the issue: https://www.redhat.com/archives/freeipa-devel/2015-June/msg00505.html Please test it and let me know if it works for you. Nathaniel On Wed, 2015-06-17 at 12:35 +0530, Prashant Bapat wrote: Simo is right! This issue is same as https://fedorahosted.org/freeipa/ticket/5047 If I change the algorithm in the otp url to uppercase it scans in Google authenticator/iPhone. Further more I manually edited the /usr/lib/python2.7/site -packages/ipalib/plugins/otptoken.py and uppercases the 'sha' to 'SHA' in a test VM and it works as expected. I hate to do this in the production server though. On 12 June 2015 at 23:32, Prashant Bapat prash...@apigee.com wrote: Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Thanks for your help. --Prashant -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
On Fri, 2015-06-12 at 21:25 +0200, Jakub Hrozek wrote: On Fri, Jun 12, 2015 at 11:32:58PM +0530, Prashant Bapat wrote: Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Google Authenticator or FreeOTP? This list might be a good place to ask about the latter, but not the former.. Well FreeIPA generates the barcode so we need to check if there is a compatibility issue with google-authenticator too. I think we have a report about the case used to generate some algorithm names, that get embedded in the QR code: https://fedorahosted.org/freeipa/ticket/5047 It may be the same issue here. Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
On Fri, Jun 12, 2015 at 11:32:58PM +0530, Prashant Bapat wrote: Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Google Authenticator or FreeOTP? This list might be a good place to ask about the latter, but not the former.. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] OTP - Google Authenticator - iPhone - Invalid barcode
Hi, Has anyone seen this ? When a user tries to scan the QR code he gets a message saying invalid barcode. This happens only with iPhone + Google Authenticator. Thanks for your help. --Prashant -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
