Current set of translation strings used for the Kerberos ticket policy in ipaserver/plugins/internal.py describes several authentication indicator types:
ipaserver/plugins/internal.py
"type_otp": _("Two factor authentication (password + OTP)"), "type_password": _("Password"), "type_radius": _("RADIUS"), "type_pkinit": _("PKINIT"), "type_hardened": _("Hardened Password (by SPAKE or FAST)"), "type_disabled": _("Disable per-user override"), "user_tooltip": _("<p>Per-user setting, overwrites the global setting if any option is checked.</p><p><strong>Password + Two-factor:</strong> LDAP and Kerberos allow authentication with either one of the authentication types but Kerberos uses pre-authentication method which requires to use armor ccache.</p><p><strong>RADIUS with another type:</strong> Kerberos always use RADIUS, but LDAP never does. LDAP only recognize the password and two-factor authentication options.</p>"), },
Note that a user_tooltip string does not cover all supported indicator types. It needs to be fixed to be in line with the actual set of supported authentication indicators.
user_tooltip
Login to comment on this ticket.