ENCRYPTTOTPSECRETS(1)

📦
version 2.23.4 · 13 versions
, in fedora 43, fedora 44

💖 ENCRYPTTOTPSECRETS(1) 💖

okay bestie, pull up a chair, because we're about to talk about encryptTotpSecret — a lil tool from the User Contributed Perl Documentation corner of the LemonLDAP::NG universe, and honestly? she's giving migration-glam. 🎀

✨ NAME ✨

encryptTotpSecret — a whole tool whose entire job is encrypting the TOTP secrets you already have lying around. yes. existing ones. not just the new ones. obsessed. 💅

🌸 SYNOPSIS 🌸

encryptTotpSecret [options]

that's it. that's the vibe. options go in, magic comes out. 🦋

🧚 DESCRIPTION 🧚

so here's the tea ☕ — this script is a migration tool. you use it after you've flipped on TOTP secret encryption over in the Manager.

because here's the thing: turning encryption on in the config only protects secrets that get registered from that point on. your legacy secrets? still sitting there unencrypted, not a care in the world. 😭

this script goes and makes sure those existing secrets actually get encrypted, instead of only the freshly registered ones. she's doing the cleanup nobody else wanted to do. main character energy, fr fr. 👑

🫶 OPTIONS 🫶

  • --help, -h — prints a quick lil help message and dips. short, sweet, iconic. ✨
  • --dry-run, -n — stops the script from saving any modifications to the session database. it'll look, it'll think, it'll change nothing. perfect for when you're nosy but not committed. 🙈
  • --update, -u — by default, secrets that are already encrypted get skipped by the script. use this to force already-encrypted secrets to be decrypted, then re-encrypted using a different key (or just decrypted). yes, that's the whole point of the flag. slay. 🔥
  • --old-key, -o — the key used to decrypt secrets in --update mode.

by default, the totp2fKey or key LemonLDAP::NG configuration parameters are used. 💜

  • --new-key, -k — the key used to encrypt secrets. use -u -k DECRYPT to decrypt secrets instead. (yes, DECRYPT literally is the value you pass. iykyk.)

by default, the totp2fKey or key LemonLDAP::NG configuration parameters are used. 💜

  • --force, -f — encrypts existing TOTP secrets even if encryption is disabled in the configuration. bold. fearless. she does not read the config for permission. 😤
  • --verbose, -v — cranks up the level of detail the script gives you. use it when you want the full commentary track. 🎙️

🌈 SEE ALSO 🌈

go look. the lore is deep. 📚

👑 AUTHORS 👑

Maxime Besson, <maxime.besson@worteks.com>

give her her flowers. 💐

💀 BUG REPORT 💀

use the OW2 system to report a bug or ask for features: <https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues>

found something cursed? tell them, don't just suffer in silence bestie 😭

🍓 DOWNLOAD 🍓

Lemonldap::NG is available at <https://lemonldap-ng.org/download>

go get it. it's free. it's right there. 🫶

Copyright (C) 2008-2016 by Xavier Guimard, <x.guimard@free.fr> Copyright (C) 2008-2016 by Clément Oudot, <clem.oudot@gmail.com>

This library is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.

no warranty, no promises, no refunds — that's the deal, bestie. read the license, she's not bluffing. ⚠️

okay and that's the whole page!! 💖 written for perl v5.42.3, dated 2026-09-24 — remember that date, it's her birthday. go forth and encrypt those secrets, you absolute legend. periodt. 💅✨

📦 where this page comes from