Updated totpcgi version with support for token reprovisioning

Konstantin Ryabitsev icon at fedoraproject.org
Mon Sep 23 17:14:24 UTC 2013


On Mon, Sep 23, 2013 at 12:01 PM, Kevin Fenzi <kevin at scrye.com> wrote:
>> I released a new version of totpcgi today, which adds support for
>> token reprovisioning. It's a most commonly requested feature and
>> supports issuing a new token if you still have access to either your
>> old device, or to the scratch codes.
>
> Cool.
>
> Is it configurable to enable? Or just always enabled?

It's always enabled. Since it requires having the old device in
possession in order to re-issue the token, it should be pretty safe
and removes the admin's involvement for things like switching devices
(which happens all the time).

Best,
-- 
Konstantin Ryabitsev
LinuxFoundation.org
Montréal, Québec


More information about the infrastructure mailing list