Institutionally we have a hardware token set up, you use a pin to unlock the
device and it spits out a passcode.
The passcode allows access through kerberos, radius, or ldap binds to linux
servers, or with a custom apache module to websites.
I have an out-of-band private network set up that atta
, "Nathaniel McCallum" wrote:
>On Wed, 2015-05-13 at 14:44 +0000, Bahmer, Eric Vaughn wrote:
>> Institutionally we have a hardware token set up, you use a pin to
>> unlock the device and it spits out a passcode.
>> The passcode allows access through kerberos, radius, or lda
ures after sanitizing
them for security policy reasons.
Is it possible that sssd is the culprit trying to do a pre-auth before the
real auth?
>
>On 5/13/15, 12:00 PM, "Nathaniel McCallum" wrote:
>
>>On Wed, 2015-05-13 at 14:44 +, Bahmer, Eric Vaughn wrote:
>>&