diff options
| author | Christian Poessinger <christian@poessinger.com> | 2022-10-14 20:00:25 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2022-10-14 20:00:25 +0200 |
| commit | da535ef5697f6ce87a7f34ff185e4df239e6af63 (patch) | |
| tree | 4e074588462835ee16384c75c01fbc1058e2e905 /data | |
| parent | 427ea592ae8d92d29aca245683832b5bd75b643d (diff) | |
| download | vyos-1x-da535ef5697f6ce87a7f34ff185e4df239e6af63.tar.gz vyos-1x-da535ef5697f6ce87a7f34ff185e4df239e6af63.zip | |
login: 2fa: T874: fix Google authenticator issues
Move default values of TOTP configuration from a global to a per user setting.
This makes the entire code easier as no global configuration must be blended
into the per user config dict.
Also it should be possible to set the authentication window "multiple concurrent
keys" individual per user.
set system login user vyos authentication otp key 'gzkmajid7na2oltajs4kbuq7lq'
set system login user vyos authentication plaintext-password 'vyos'
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/login/pam_otp_ga.conf.j2 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/data/templates/login/pam_otp_ga.conf.j2 b/data/templates/login/pam_otp_ga.conf.j2 index 4c1f411d1..cf51ce089 100644 --- a/data/templates/login/pam_otp_ga.conf.j2 +++ b/data/templates/login/pam_otp_ga.conf.j2 @@ -1,5 +1,5 @@ {% if authentication.otp.key is vyos_defined %} -{{ authentication.otp.key }} +{{ authentication.otp.key | upper }} " RATE_LIMIT {{ authentication.otp.rate_limit }} {{ authentication.otp.rate_time }} " WINDOW_SIZE {{ authentication.otp.window_size }} " DISALLOW_REUSE |