Charles,

> Our campus uses DUO. We're wondering whether it's possible to use that from 
> IPA. My main concern is that user interaction can take time.

Yes, it is possible and we currently utilize DUO on restricted
systems.  Our IPA domain consists of an AD Trust (bulk of users) and
IDM-only users.

HTH,
John DeSantis


Il giorno ven 11 feb 2022 alle ore 12:40 Charles Hedrick via
FreeIPA-users <[email protected]> ha scritto:
>
> Our campus uses DUO. We're wondering whether it's possible to use that from 
> IPA. My main concern is that user interaction can take time.
>
> I see that it's possible to raise the timeout. But is that safe to do? I'm 
> wondering whether otpd is really designed to have lots of threads waiting for 
> the user to respond.
>
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam on the list, report it: 
> https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to