Changes between Version 3 and Version 4 of net.sf.basedb.otp/install

Timestamp:

Dec 6, 2018, 11:15:12 AM (5 years ago)

Author:

Nicklas Nordborg

Comment:

Documented new configuration option for #1087

net.sf.basedb.otp/install

@@ -59 +59 @@
 == Additional configuration settings ==
 
-There are some additional configuration settings that can be made in the `base-otp.properties` file. This step is optional.
+There are some additional configuration settings that can be made in the `base-otp.properties` file. This step is optional. If you are installing multiple login managers on the same system you probably want to check the value for the `allow-other-authentication` setting. The authentication methods published by this extension are named `otp-only` and `otp+password`. You may need this when configuring the other login managers.
 
-|| '''Setting''' || '''Description''' || '''Since''' ||
-|| login-method || Set the value to `otp-password` (the default) to require users to specify [[BR]]both the password and an OTP or to `otp-only` to only use an OTP. || 1.0 ||
-|| no-otp || Comma- or whitespace- separated list of application ids for which OTP login should be disabled.[[BR]] For example, if you have installed the [wiki:net.sf.basedb.ftp FTP server] but do not want to use OTP for that: [[BR]] `no-otp=net.sf.basedb.clients.ftp` || 1.0 ||
-|| require-otp || Comma- or whitespace- separated list of application ids for which OTP login is required.[[BR]] Users that has not configured OTP login will not be able to use those clients. || 1.0 ||
+'''Note! Since version 1.2 changes to the configuration file are automatically detected and applied. There is no longer any need to re-start the server.'''
 
+==== login-method ====
+Set the value to `otp+password` (the default) to require users to specify both the password and an OTP or to `otp-only` to only use an OTP.
 
+==== no-otp ====
+Comma- or whitespace- separated list of application ids for which OTP login should be disabled. For example, if you have installed the [wiki:net.sf.basedb.ftp FTP server] but do not want to use OTP for that: 
+{{{
+no-otp = net.sf.basedb.clients.ftp
+}}}
+
+==== require-otp ====
+Comma- or whitespace- separated list of application ids for which OTP login is required. Users that has not configured OTP login will not be able to use those clients. For example, to force all users of the web client to use OTP:
+{{{
+require-otp = net.sf.basedb.clients.web
+}}}
+
+==== allow-other-authentication (since 1.2) ====
+Comma- or whitespace- separated list of other authentication methods that are allowed even if a user has configured OTP. Use `*` as a wildcard for all other authentication methods (including password authentication). Examples:
+
+{{{
+# Also allow password authentication even if a user has OTP
+allow-other-authentication = password
+
+# Allow all other authentication methods
+allow-other-authentication = *
+
+# If the YubiKey login extension is also installed we can 
+# allow users to use either OTP or YubiKey
+allow-other-authentication = yubikey
+}}}