Changes between Version 6 and Version 7 of net.sf.basedb.yubikey/install

Timestamp:

Dec 6, 2018, 9:37:54 AM (6 years ago)

Author:

Nicklas Nordborg

Comment:

Documented new configuration option for #1086

net.sf.basedb.yubikey/install

@@ -47 +47 @@
 There are some additional configuration settings that can be made in the `yubikey.properties` file. This step is optional.
 
-|| '''Setting''' || '''Description''' || '''Since''' ||
-|| no-yubikey || Comma- or whitespace- separated list of application ids for which !YubiKey login should be disabled.[[BR]] For example, if you have installed the [wiki:net.sf.basedb.ftp FTP server] but do not want to use !YubiKey for that: [[BR]] `no-yubikey=net.sf.basedb.clients.ftp` || !YubiKey 1.1 ||
-|| require-yubikey || Comma- or whitespace- separated list of application ids for which !YubiKey login is required.[[BR]] Users without a !YubiKey will not be able to use those clients. || !YubiKey 1.3 ||
+==== no-yubikey (since 1.1) ====
+Comma- or whitespace- separated list of application ids for which !YubiKey login should be disabled. For example, if you have installed the [wiki:net.sf.basedb.ftp FTP server] but do not want to use !YubiKey for that: 
+{{{
+no-yubikey = net.sf.basedb.clients.ftp
+}}}
+
+==== require-yubikey (since 1.3) ==== 
+Comma- or whitespace- separated list of application ids for which !YubiKey login is required. Users without a !YubiKey will not be able to use those clients. For example, to force all users of the web client to use !YubiKey:
+{{{
+require-yubikey = net.sf.basedb.clients.web
+}}}
+
+==== allow-other-authentication (since 1.5) ====
+Comma- or whitespace- separated list of other authentication methods that are allowed even if a user has configured a !YubiKey. Use `*` as a wildcard for all other authentication methods (including password authentication). Examples:
+
+{{{
+# Also allow password authentication even if a user has a YubiKey
+allow-other-authentication = password
+
+# Allow all other authentication methods
+allow-other-authentication = *
+
+# If the OTP login extension is also installed we can 
+# allow users to use either YubiKey or OTP (with or without password)
+allow-other-authentication = otp-only otp+password
+}}}