Aurélien Bompard

Thanks for the tip Christian. Here's how we could do it: - add a configuration option `MAX_USER_RENAMES` set by default to, say, 5 - in a user's settings page, add...

Hmm I guess this would be done directly in FreeIPA, no? There are mailserver-oriented objectclasses that can store email aliases for users and the mailserver can be configured to look...

Thanks for the very useful feedback!

> To pile on: what about removals? Sponsors are supposed to remove members sometimes. When you're a sponsor of a group, you should see a red trash icon next to...

@tiran , do you know if this information is stored (and available) in IPA?

Yeah there is still no proper installation documentation, sadly. But all the steps and files we use in our Openshift deployment are publicly accessible ([playbook](https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/openshift-apps/noggin.yml), [template](https://pagure.io/fedora-infra/ansible/blob/main/f/roles/openshift-apps/noggin/templates)). I know it's not...

If it's an IPA cluster, then you only need one instance of Noggin.

Yes, this is a security precaution. It is explained on the OTP creation page (in bold) that once you create an OTP token, you can't disable two-factor authentication.

If you have a GPG key in your account, you can however ask admins to delete your token by sending a signed email to admin @ fedoraproject dot org.

Re-opening so that security experts can chime in.