Hi all,

ipa --version

VERSION: 4.5.0, API_VERSION: 2.228

At some point in the WebUI Freeipa, the last known type of user authorization is used. 

Changing the type of authorization of the user does not change anything.

For example, if the user has set the OTP authorization type and change it to a password, FreeIPA WebUI ignores this and waits for OTP input. And vice versa.

If the user has set the password authorization type and change it to OTP, logon only by password will work.

kinit and everything else works correctly.

I did not find any error messages in logs. (httpd, krb5, slapd)

Does anyone know how to fix this?

 P.S. The official demo has the same problem.