[Freeipa-users] Re: road-warrior laptop vs password change in FreeIPA

2022-07-16 Thread Ian Willis via FreeIPA-users
On Sat, 2022-07-16 at 15:03 +0100, Sam Morris via FreeIPA-users wrote: > On 16/07/2022 11:09, Harald Dunkel via FreeIPA-users wrote: > > I've got a few colleagues running Debian 10 or 11 on a laptop. > > Their accountis managed by FreeIPA in the office. On first-time > > login their laptop iswired

[Freeipa-users] Re: SSSD prompting/2fa

2022-07-16 Thread Sam Morris via FreeIPA-users
On 16/07/2022 04:08, Jacob M Cutright via FreeIPA-users wrote: Hello, Apologies if I am misunderstanding and this is incorrect, but users who log in via SSH keys do not get Kerberos tickets by default, which is why your pam_sss_sudo isn't working. You can reference this issue here: https://pa

[Freeipa-users] Re: road-warrior laptop vs password change in FreeIPA

2022-07-16 Thread Sam Morris via FreeIPA-users
On 16/07/2022 11:09, Harald Dunkel via FreeIPA-users wrote: I've got a few colleagues running Debian 10 or 11 on a laptop. Their account is managed by FreeIPA in the office. On first-time login their laptop is wired to the office lan. When they are in home office they have a VPN connection (IPs

[Freeipa-users] road-warrior laptop vs password change in FreeIPA

2022-07-16 Thread Harald Dunkel via FreeIPA-users
Hi folks, I've got a few colleagues running Debian 10 or 11 on a laptop. Their account is managed by FreeIPA in the office. On first-time login their laptop is wired to the office lan. When they are in home office they have a VPN connection (IPsec, wireguard or openvpn) to the office, but since