Project

General

Profile

Actions

tickets #158359

closed

Kanidm login asks for TOTP instead of passphrase

Added by crameleon about 1 month ago. Updated 30 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
FreeIPA/Kanidm
Target version:
-
Start date:
2024-04-01
Due date:
% Done:

0%

Estimated time:

Description

Hi,

user "bmwiedemann" can not log in https://idm.i.o.o, upon entering their username, the UI asks for a TOTP token instead of for a passphrase.
We never used TOTP with FreeIPA (I did not even know that was a thing), and comparing the kanidm person get output with mine does not reveal any obvious differences.
I tried selecting "passphrase" in the authentication methods of their user in the FreeIPA UI, but that did not make a difference.

Could you check and if possible remove this token?

Thanks,
Georg


Files

Actions #1

Updated by firstyear about 1 month ago

See attached screenshot. They do have an OTP associated with their account, as do 4 others. Kanidm is correctly prompting for it as a result.

Actions #2

Updated by crameleon 30 days ago

  • Status changed from New to Resolved
  • Private changed from Yes to No

Thank you! I did not spot this interface in FreeIPA before. Will keep it in mind for next time.

Actions

Also available in: Atom PDF