[Freeipa-users] Re: IPA Server Upgrade: CA REST API: 403 error

2021-12-23 Thread Alexander Bokovoy via FreeIPA-users
On to, 23 joulu 2021, Dungan, Scott A. via FreeIPA-users wrote: Thanks for the link, Ferrão! Using the information from that thread, I inspected the contents of /etc/pki/pki-tomcat/server.xml and noticed that on lines 129 and 171, there were two values listed: one for sectet= and one for requi

[Freeipa-users] 2FA - prompting - single_prompt

2021-12-23 Thread Winfried de Heiden via FreeIPA-users
Hi all, Using FreeIPA, 2FA can be made optional by enabling "Password" AND "Two factor authentication (password + OTP)" for a user. For particular hosts the 2FA now can be made mandatory by enabling "Two factor authentication (password + OTP)" Now, for hosts for which 2FA is NOT mandatory, a