Hi Jochen, Thank you for your reply, I do have ipv6 disabled and in capture do not see failed attempts. In capture it is only ipv4:
1 0.000000000 xx.xx.xx.xx -> yy.yy.yy.yy RADIUS 117 Access-Request(1) (id=214, l=75) 2 7.889686902 yy.yy.yy.yy -> xx.xx.xx.xx RADIUS 90 Access-Accept(2) (id=214, l=48) If delay more then 5 seconds between request and reply you going to get request for password again :-( First Factor: Second Factor: First Factor: If your Access-Accept arrived within 5 seconds you will login :-) Regards, Sergiy _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org