From Fedora Project Wiki

Revision as of 15:41, 31 May 2013 by Npmccallum (talk | contribs) (Created page with "{{QA/Test_Case |description=Internal OTP. |setup= === Prerequisites === <ol> <li>A FreeIPA instance setup like this.</li> <li>Google Aut...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)


Internal OTP.



  1. A FreeIPA instance setup like this.
  2. Google Authenticator on your Android, iOS or Blackberry device.

How to test


First, log in as the admin:

# kinit admin

Second, we will create a user for OTP testing:

# ipa user-add otp --random

Third, we need to log in as the new user. This will force a password change. This is important since OTP does not yet implement password changing.

# kinit otp

Enabling OTP

Enabling FAST

Clients which will support OTP, like SSSD, will enable FAST automatically. However, for testing purposes, kinit requires manual configuration.

First, we need to log in as the admin user (or really any user) so that we can use this user's ccache to enable FAST.

# kinit admin
# klist

Expected Results

All the test steps should end with the specified results.