https://bugs.openldap.org/show_bug.cgi?id=10192
--- Comment #3 from Howard Chu hyc@openldap.org --- Note: the web form you referenced takes the shared secret in base32 encoded form, but, as documented in the slapo-otp(5) manpage, the oathSecret attribute stores the secret as raw bytes. So you can't just paste the secret from one to the other and expect to get matching values.