Re: about slapo totp

Bastian Tweddell wrote:

While working on this matter I discovered that there is not only the slap-totp contrib module, but also the slapo-otp openldap module.

With that one, I managed to get bind-authentication + 2FA to work; thanks to the test code in openldap. This work so far when the user entry has a userPassword attribute and is allowed to bind. The bind call also gives the userpassword and 2FA token in the credentials.

Now I would like to achieve, that only TOTP authentication is done. Would this be possible with slapo-otp? Or am I in a dead end here?

Use the contrib module instead, it only does TOTP and nothing else.