On 10/08/15 13:05, Petr Vobornik wrote:
Text in the ticket is IMHO wrong. Patch uses different text.:
""""
If you choose the password and two-factor authentication types at once,
Kerberos still enforces authentication with both password and OTP. LDAP
allows authentication with either one of the authentication types in
this situation.
"""
One can also use only "Password" with kinit but must provide an armor
ccache.
e.g.:
$ kinit admin
$ klist
Ticket cache: KEYRING:persistent:17127:17127
...
$ kinit -T KEYRING:persistent:17127:17127 fbar
https://fedorahosted.org/freeipa/ticket/4935
Works for me, ACK.
--
David Kupka
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
