freeipa

#5628 webui: Unclear(UX) purpose of OTP field in password reset form on login
Closed: fixed by frenaud. Opened by pvoborni.

Closed: fixed
Reopen Issue

scenario
1. As an admin I create a user and a password for that user
2. User tries to log into the UI he is presented with the UI form that has:

  • user name
  • current password
  • OTP (optional)
  • New password first prompt
  • New password second prompt

It is unclear what you need to do with OTP prompt. I suggest instead of "optional" say something like "leave blank if you are not using OTP token for authentication"

Note: similar issue is most likely also in:

  • password change dialog(top bar//change password)
  • ipa/ui/reset_password.html page

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

Metadata Update from @pvomacka:
- Issue close_status updated to: None
- Issue tagged with: webui

I also suggest moving the OTP field to be the last field, after new password 1 and 2.

After observing a number of users, I've realized that having OTP before the new password often leads to an OTP that times out by the time the user has typed in his new password. Putting the OTP field last would fix that.

master:

  • 13b177822ea8382c9c5986862424f8ff8f08f16f WebUI: move OTP to be the last field in the PW reset form
  • d63a91da4bb1b20b2cb0601bcb3a640ab8511151 WebUI: reword OTP info message displayed during PW reset
  • ea5c0a1f7c1b2902a74731787710bee40542330f Unify spelling of "One-Time Password"

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4799 (was: 0)
- Issue assigned to carbenium (was: someone)
- Issue set to the milestone: None (was: FreeIPA 4.5 backlog)

ipa-4-8:

  • 2c3bf183634cb5615528daa88339e834e5400530 WebUI: move OTP to be the last field in the PW reset form
  • 82475aab31a5f8e06360d43b4e3d5e1aa2daf0fb WebUI: reword OTP info message displayed during PW reset
  • 0320de78571bb75ed17cd31727f7b25360941f67 Unify spelling of "One-Time Password"

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • dc11b98e4a6650040731405a0e954e20be12afa6 Unify spelling of "One-Time Password" (take 2)

ipa-4-8:

  • 8c7f54d1ffbddbfabd4f4547edeeb38a24152518 Unify spelling of "One-Time Password" (take 2)
Metadata

webui

None
None
Normal
https://github.com/freeipa/freeipa/pull/4799
defect
Web UI
usability
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.