Skip to content
Snippets Groups Projects
Commit 8aed72e2 authored by Dmitrii Shcherbakov's avatar Dmitrii Shcherbakov
Browse files

enable totp auth plugin

The only config change is in keystone.conf to enable totp auth plugin.

A secret can be generated via an arbitrary tool and uploaded to Keystone
via credential api by specifying "totp" credential type, secret and a
user id.

https://developer.openstack.org/api-ref/identity/v3/#create-credential

https://blueprints.launchpad.net/keystone/+spec/totp-auth
https://docs.openstack.org/keystone/pike/advanced-topics/auth-totp.html#configuring-totp

Change-Id: Ie3e4d828aae1f0918ace94adbdfdb81ffdc12878
parent c2565924
No related branches found
No related tags found
No related merge requests found
......@@ -67,7 +67,7 @@ driver = {{ assignment_backend }}
[oauth1]
[auth]
methods = external,password,token,oauth1
methods = external,password,token,oauth1,totp
password = keystone.auth.plugins.password.Password
token = keystone.auth.plugins.token.Token
oauth1 = keystone.auth.plugins.oauth1.OAuth
......
......@@ -67,7 +67,7 @@ driver = {{ assignment_backend }}
[oauth1]
[auth]
methods = external,password,token,oauth1,mapped,openid
methods = external,password,token,oauth1,mapped,openid,totp
password = keystone.auth.plugins.password.Password
token = keystone.auth.plugins.token.Token
oauth1 = keystone.auth.plugins.oauth1.OAuth
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment