On Thu, Jun 17, 2021 at 11:00:33AM -0400, Simo Sorce wrote:
On Thu, 2021-06-17 at 07:54 -0500, Michael Catanzaro wrote:
> On Thu, Jun 17 2021 at 10:09:26 AM +0100, David Howells
> <dhowells(a)redhat.com> wrote:
> > What if you're not using gnome?
>
> Then you should install fedora-packager-kerberos? Or fedora-packager,
> which has a dependency on fedora-packager-kerberos.
>
> Anyway, at first I thought that gnome-online-accounts needed a
> dependency on this new fedora-packager-kerberos if special kerberos
> configuration is required now, but as Kevin explained that dep is only
> required if using OTP, and OTP doesn't work with gnome-online-accounts
> anyway, so we're fine. (Well, as fine as we can be when enabling OTP is
> an irreversible trap that will permanently break your
> gnome-online-accounts, requiring the creation of a new FAS account to
> recover.)
I am pretty sure you can ask an admin to fix the FAS account if really
needed.
OTP cannot be reversed by users themselves, but admins can fix it if
really needed.
Indeed. We do need to verify you are you before we clear your last token
thought. (gpg signed email from the same key as attached to your
account, etc).
kevin