FireBrick OTP: Difference between revisions

==Setting up the OTP==

Once you have your OTP device, then on the FireBrick click on Config and then Configure OATH/OTP

The fields on this form are:

*Serial Number - the name you want to give to this OTP - you can use the serial number on the OTP, or simply a name, eg Andrews iPhone, up to you.

*Key - this is the HEX key that will be given to you from the OTP device.

*Digits - how many digits the OTP device gives you.

*Interval - the time in seconds that the OTP changes, or set to Event based.

*Validate - these are the 3 sequential values from the device - ie, enter in the current value, wait for it to update, enter in the new value, and then the same for the third value.

Click update, and should be set.

==Configuring OTP devices against FireBrick Users==

===OTP example==

You can use the OTP instead of a password, eg:

<syntaxhighlight>

<user name="bob" timeout="PT1H" otp="Bobs keyring" comment="OTP token"/>

</syntaxhighlight>

===Password and OTP example==

<syntaxhighlight>

<user name="bob" timeout="PT1H" otp="Bobs keyring" comment="OTP token" password="secret"/>

</syntaxhighlight>

With this, bob will need to log in to the FireBrick using the password of <opt><password> - is the opt value followed by his password.