Hi al,
OTP using IPA 4.5 on CentOS seems to work well. However: I can
force a user to use OTP and/or a host.
Selecting a user, ALL authentication needs OTP. Since sudo in this
case will ask for OTP also, this turn out quite inconvenient. Is
is
On pe, 23 helmi 2018, Winfried de Heiden via FreeIPA-users wrote:
Hi al,
OTP using IPA 4.5 on CentOS seems to work well. However: I can force a user to
use OTP and/or a host.
Selecting a user, ALL authentication needs OTP. Since sudo in this case will
ask for OTP also, this turn out quite
Hey Winfired,
I've been struggling with this too.
Currently I'm doing a hack (NO PASSWORD) in sudoers to at least workaround
the otp at sudo.
It's as always usability+angry users vs security.
BR
Maciej
On Fri, Feb 23, 2018 at 3:07 PM, Winfried de Heiden via FreeIPA-users <
freeipa-users@lists.
On pe, 23 helmi 2018, Maciej Drobniuch via FreeIPA-users wrote:
Hey Winfired,
I've been struggling with this too.
Currently I'm doing a hack (NO PASSWORD) in sudoers to at least workaround
the otp at sudo.
It's as always usability+angry users vs security.
Well, consider that authentication is
Winfried de Heiden via FreeIPA-users
writes:
> OTP using IPA 4.5 on CentOS seems to work well. However: I can force a user
> to use OTP and/or a host.
Authentication indicators won't work that way...
> Selecting a user, ALL authentication needs OTP. Since sudo in this case will
> ask for OTP