Authorization tokentype action bug?

Question
1

Hi,

I followed this documentation reference to setup tokentype policy:
http://privacyidea.readthedocs.io/en/latest/policies/authorization.html?highlight=tokentype

However, when I entered a comma-seperated string list in the field:
totp,pw,spass

the policy does not seem to work. Only tokentype of “totp” is allowed as a
result.

And the action result was interpreted as followed in the policy list of the
webui after submit:
{ “pw”: true, “spass”: true, “tokentype”: “totp” }

I am not sure if I miss something here.

2

I fixed the documentation.Am Freitag, den 09.12.2016, 02:07 -0800 schrieb Cornelius Kölbel:

Hello Quynh,

thanks a lot for pointing this out!
The documentation is wrong.
It must be a space separated list.

Kind regards
Cornelius

Hi,

I followed this documentation reference to setup tokentype policy:
http://privacyidea.readthedocs.io/en/latest/policies/authorization.
html?highlight=tokentype

However, when I entered a comma-seperated string list in the field:
totp,pw,spass

the policy does not seem to work. Only tokentype of “totp” is
allowed as a result.

And the action result was interpreted as followed in the policy
list of the webui after submit:
{ “pw”: true, “spass”: true, “tokentype”: “totp” }

I am not sure if I miss something here.

–
Please read the blog post about getting help
Getting help – privacyID3A.

For professional services and consultancy regarding two factor
authentication please visit
One Time Services - NetKnights - IT-Sicherheit - Zwei-Faktor-Authentisierung - Verschlüsselung

In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
privacyIDEA Support Level

You received this message because you are subscribed to a topic in
the Google Groups “privacyidea” group.
To unsubscribe from this topic, visit https://groups.google.com/d/top
ic/privacyidea/AV8w4K3w5Ko/unsubscribe.
To unsubscribe from this group and all its topics, send an email to p
rivacyidea+unsubscribe@googlegroups.com.
To post to this group, send email to privacyidea@googlegroups.com.
Visit this group at https://groups.google.com/group/privacyidea.
To view this discussion on the web visit https://groups.google.com/d/
msgid/privacyidea/846cb9f2-52d5-498c-9f40-
44340e246710%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

signature.asc (819 Bytes)

3

Hello Quynh,

thanks a lot for pointing this out!
The documentation is wrong.
It must be a space separated list.

Kind regards
CorneliusAm Freitag, 9. Dezember 2016 03:04:22 UTC+1 schrieb Quynh Nguyen:

Hi,

I followed this documentation reference to setup tokentype policy:

7.4. Authorization policies — privacyIDEA 3.8 documentation

However, when I entered a comma-seperated string list in the field:
totp,pw,spass

the policy does not seem to work. Only tokentype of “totp” is allowed as a
result.

And the action result was interpreted as followed in the policy list of
the webui after submit:
{ “pw”: true, “spass”: true, “tokentype”: “totp” }

I am not sure if I miss something here.