On Tue, May 16, 2017 at 04:48:42PM +0300, Andrey Dudin wrote: > Hello all. > > tell me please. Is it possible to use password and otp auth at the one > moment? > > For example I have DEV/STAGE servers and want to be able use password auth > for ssh, but for PROD servers I want to use OTP auth for same user.
Authentication indicators can be used for this. If you add ipa host-mod --auth-ind=otp prod.server Only 2-factor authentication should be possible on prod.server. But please note that e.g. ssh-key based authentication will still be possible as well. HTH bye, Sumit > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project