freeipa

#5047 OTP uri incompatible with Google Authenticator and other TOTP clients
Closed: Fixed Opened by jijojv.

Closed: Fixed
Reopen Issue

Fails to scan QR code in Google Authenticator and
https://discussions.agilebits.com/discussion/41962/totp-uri-parsing-issue

Fix is trivial in /ipalib/plugins/otptoken.py
just uppercase the algorithm name

    StrEnum('ipatokenotpalgorithm?',
        cli_name='algo',
        label=_('Algorithm'),
        doc=_('Token hash algorithm'),
        default=u'SHA1',
        autofill=True,
        flags=('no_update'),
        values=(u'SHA1', u'SHA256', u'SHA384', u'SHA512'),

See this "RFC" https://github.com/google/google-authenticator/wiki/Key-Uri-Format

Related thread on freeipa-users: https://www.redhat.com/archives/freeipa-users/2015-June/msg00304.html

https://www.redhat.com/archives/freeipa-devel/2015-June/msg00505.html

master:

  • 4dfa23256dc2e35480843beef92e03b1bafd578b Fix OTP token URI generation

ipa-4-1:

  • de7aed148623075d4fda7b3ecb46344cf2589b4a Fix OTP token URI generation

Metadata Update from @jijojv:
- Issue assigned to npmccallum
- Issue set to the milestone: FreeIPA 4.1.5
Metadata
None
None
None
Normal
defect
OTP
1
None
pvoborni
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.