Hello the list,
After ignoring things, this now _works_
$kinit helpagent
Password for helpag...@test.org:
$ ipa otptoken-find
2 OTP tokens matched
Unique ID: otpuser1
Type: TOTP
Owner: otpuser1
Unique ID: otpuser2
Type: TOTP
Sadly no, another person had been creating OTP tokens with the helpagent.
These were tokens owned by the helpagent, but with other user's names.
From: Aaron Hicks [mailto:aaron.hi...@nesi.org.nz]
Sent: Thursday, 23 November 2017 4:00 PM
To: 'freeipa-users@lists.fedorahosted.org'