register-yubikey-otp-device

Description

Registers a YubiKey OTP device with the Directory Server for a specified user so that the device may be used to authenticate that user in conjunction with the UNBOUNDID-YUBIKEY-OTP SASL mechanism. Alternately, it may be used to deregister one or more YubiKey OTP devices for a user so that they may no longer be used to authenticate that user.

Examples

register-yubikey-otp-device --hostname server.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword adminPassword \
     --authenticationID u:test.user --userPassword testUserPassword \
     --otp abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqr

register-yubikey-otp-device --hostname server.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword adminPassword \
     --deregister \
     --authenticationID dn:uid=test.user,ou=People,dc=example,dc=com

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-h {host}
--hostname {host}

-p {port}
--port {port}

-D {dn}
--bindDN {dn}

-w {password}
--bindPassword {password}

-j {path}
--bindPasswordFile {path}

--promptForBindPassword

-Z
--useSSL

-q
--useStartTLS

--defaultTrust

-X
--trustAll

-K {path}
--keyStorePath {path}

-W {password}
--keyStorePassword {password}

-u {path}
--keyStorePasswordFile {path}

--promptForKeyStorePassword

--keyStoreFormat {format}

-P {path}
--trustStorePath {path}

-T {password}
--trustStorePassword {password}

-U {path}
--trustStorePasswordFile {path}

--promptForTrustStorePassword

--trustStoreFormat {format}

-N {nickname}
--certNickname {nickname}

--enableSSLDebugging

-o {name=value}
--saslOption {name=value}

--useSASLExternal

--helpSASL

--deregister

--otp {otp}

--authID {authID}

--userPassword {password}

--userPasswordFile {path}

--promptForUserPassword

--interactive

--outputFile {path}

--appendToOutputFile

--teeOutput

--propertiesFilePath {path}

--generatePropertiesFile {path}

--noPropertiesFile

--suppressPropertiesFileComment