From 4dfa23256dc2e35480843beef92e03b1bafd578b Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Jun 17 2015 14:46:25 +0000 Subject: Fix OTP token URI generation Google Authenticator fails if the algorithm is not uppercase. https://fedorahosted.org/freeipa/ticket/5047 Reviewed-By: Petr Vobornik --- diff --git a/ipalib/plugins/otptoken.py b/ipalib/plugins/otptoken.py index 867659e..294c1c5 100644 --- a/ipalib/plugins/otptoken.py +++ b/ipalib/plugins/otptoken.py @@ -325,7 +325,7 @@ class otptoken_add(LDAPCreate): args['issuer'] = issuer args['secret'] = base64.b32encode(entry_attrs['ipatokenotpkey']) args['digits'] = entry_attrs['ipatokenotpdigits'] - args['algorithm'] = entry_attrs['ipatokenotpalgorithm'] + args['algorithm'] = entry_attrs['ipatokenotpalgorithm'].upper() if options['type'] == 'totp': args['period'] = entry_attrs['ipatokentotptimestep'] elif options['type'] == 'hotp':