On Fri, 20 Sep 2013 15:21:31 -0400 Konstantin Ryabitsev icon@fedoraproject.org wrote:

Hi, all:

I released a new version of totpcgi today, which adds support for token reprovisioning. It's a most commonly requested feature and supports issuing a new token if you still have access to either your old device, or to the scratch codes.

Cool.

Is it configurable to enable? Or just always enabled?

I've only really tested it with file-based backend, and since I know Fedora uses db-based backend, it would be good to test it out, too. I just completed "fedpkg update" for it, so it should be showing up in epel-testing soon.

I'll be happy to answer any questions or help troubleshoot anything. There are no changes to the core totp cgi that should affect the custom ubikey stuff we put in last year, but buyer beware and test! :)

ok. We can test in stg soon. Thanks for the heads up.

kevin