On Mon, Sep 23, 2013 at 12:01 PM, Kevin Fenzi <kevin(a)scrye.com> wrote:
> I released a new version of totpcgi today, which adds support
for
> token reprovisioning. It's a most commonly requested feature and
> supports issuing a new token if you still have access to either your
> old device, or to the scratch codes.
Cool.
Is it configurable to enable? Or just always enabled?
It's always enabled. Since it requires having the old device in
possession in order to re-issue the token, it should be pretty safe
and removes the admin's involvement for things like switching devices
(which happens all the time).
Best,
--
Konstantin Ryabitsev
LinuxFoundation.org
Montréal, Québec