[Freeipa-users] questions regarding OTP tokens

[Gábor Varga]

Hello,

I have a couple of questions regarding the OTP tokens:

1. Can I limit the number of active tokens a regular user can have at a 
given time? If yes, then how?

2. Can I forbid the regular to generate OTP tokens? (they should only 
have a token assigned by an administrator)

3. Other than editing the python class inside 
/usr/lib/python2.7/dist-packages/ipalib/plugins/otptoken.pyc how can I 
set the default algorithm for the newly generated OTP tokens? I would 
like to disable SHA-1 and only enable at least SHA-256.

4. How can I set the default lifetime for a new OTP token other than the 
beforementiond python class?

5. How can I prevent a regular user from modifying the properties of 
his/her OTP token? (The validiy period for example..)

Thanks!

-- 
sig Gábor VARGA
Systems Engineer
__________________________________________________

Zalaszám Informatika Kft.
8900 Zalaegerszeg, Mártírok útja 53.
Telefon: 36-92-502-500
Fax: 36-92-502-501
e-mail: varga.gabor at zalaszam.hu
web: www.zalaszam.hu <http://www.zalaszam.hu>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161021/5586e8e3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 30allo3.jpg
Type: image/jpeg
Size: 19422 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20161021/5586e8e3/attachment.jpg>