From 74638edb4387b570b545f0c0e3067a3fc10c703b Mon Sep 17 00:00:00 2001 From: Antonio Torres Date: Mar 29 2021 11:53:18 +0000 Subject: ipa passwd: make help for `--otp` option clearer Update help for the `--otp` option in `ipa passwd` to actually explain its usage. Fixes: https://pagure.io/freeipa/issue/8244 Signed-off-by: Antonio Torres Reviewed-By: Rob Crittenden Reviewed-By: Florence Blanc-Renaud --- diff --git a/ipaserver/plugins/passwd.py b/ipaserver/plugins/passwd.py index a61a945..28273b4 100644 --- a/ipaserver/plugins/passwd.py +++ b/ipaserver/plugins/passwd.py @@ -47,11 +47,17 @@ is used. This is so the end-user is the only one who knows the password. The IPA password policy controls how often a password may be changed, what strength requirements exist, and the length of the password history. +If the user authentication method is set to password+OTP, the user should +pass the --otp option when resetting the password. + EXAMPLES: To reset your own password: ipa passwd + To reset your own password when password+OTP is set as authentication method: + ipa passwd --otp + To change another user's password: ipa passwd tuser1 """) @@ -105,7 +111,7 @@ class passwd(Command): takes_options = ( Password('otp?', label=_('OTP'), - doc=_('One Time Password'), + doc=_('The OTP if the user has a token configured'), confirm=False, ), )