From e820e2d1a8706b7abf051c19f532756f15449ccc Mon Sep 17 00:00:00 2001 From: Antonio Torres Date: Wed, 17 Feb 2021 13:49:39 +0100 Subject: [PATCH] ipa passwd: make help for `--otp` option clearer Update help for the `--otp` option in `ipa passwd` to actually explain its usage. Fixes: https://pagure.io/freeipa/issue/8244 Signed-off-by: Antonio Torres Reviewed-By: Rob Crittenden Reviewed-By: Florence Blanc-Renaud --- ipaserver/plugins/passwd.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/ipaserver/plugins/passwd.py b/ipaserver/plugins/passwd.py index a61a945b7..28273b49a 100644 --- a/ipaserver/plugins/passwd.py +++ b/ipaserver/plugins/passwd.py @@ -47,11 +47,17 @@ is used. This is so the end-user is the only one who knows the password. The IPA password policy controls how often a password may be changed, what strength requirements exist, and the length of the password history. +If the user authentication method is set to password+OTP, the user should +pass the --otp option when resetting the password. + EXAMPLES: To reset your own password: ipa passwd + To reset your own password when password+OTP is set as authentication method: + ipa passwd --otp + To change another user's password: ipa passwd tuser1 """) @@ -105,7 +111,7 @@ class passwd(Command): takes_options = ( Password('otp?', label=_('OTP'), - doc=_('One Time Password'), + doc=_('The OTP if the user has a token configured'), confirm=False, ), )