This is great work. Could you perhaps write up a Howto of some sort? I could definitely use this! <div class="gmail_quote">On Mar 12, 2016 11:27 AM, "Brad Bendy" <<a href="mailto:brad.bendy@gmail.com">brad.bendy@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">After doing some more trial and error I got it it to work. Take the 20 byte secret key, remove the spaces and convert to base 32. Also disable OATH Token Identifier in the YubiKey tool. I used this tool to convert it <a href="http://tomeko.net/online_tools/hex_to_base32.php?lang=en" rel="noreferrer" target="_blank">http://tomeko.net/online_tools/hex_to_base32.php?lang=en</a> Then take that base32 value and insert into the secret field on FreeIPA add token screen and your good to go, I used sha1 for algorithm. On Sat, Mar 12, 2016 at 8:47 AM, Brad Bendy <<a href="mailto:brad.bendy@gmail.com">brad.bendy@gmail.com</a>> wrote: > Hi, > > YubiKey supports HOTP it appears, but im having a heck of a time > getting the token to add FreeIPA. The YubiKey tool gives me the OATH > Token which is 6 bytes and the secret key in 20 bytes hex. Ive entered > the secret key and OATH token into the "key" field, ive tried all > algorithms and get the error of "invalid 'ipatokenotpkey': Non-base32 > digit found" > > Am I missing something? Or is this just not possible at all? I can't > find any documentation on Google saying how to set these up. > > Thanks! -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div>