[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Sam Morris via FreeIPA-users
On Thu, 2021-12-16 at 17:16 +0200, Alexander Bokovoy wrote: > On to, 16 joulu 2021, Sam Morris wrote: > > On Thu, 2021-12-16 at 16:28 +0200, Alexander Bokovoy wrote: > > > On to, 16 joulu 2021, Sam Morris wrote: > > > > > > > > But I don't see the link with ipa user-mod

[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Alexander Bokovoy via FreeIPA-users
On to, 16 joulu 2021, Sam Morris wrote: On Thu, 2021-12-16 at 16:28 +0200, Alexander Bokovoy wrote: On to, 16 joulu 2021, Sam Morris wrote: > > But I don't see the link with ipa user-mod --auth-user-type=hardened... > in my case it just seems to make it impossible to log in as the user at >

[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Sam Morris via FreeIPA-users
On Thu, 2021-12-16 at 16:28 +0200, Alexander Bokovoy wrote: > On to, 16 joulu 2021, Sam Morris wrote: > > > > But I don't see the link with ipa user-mod --auth-user-type=hardened... > > in my case it just seems to make it impossible to log in as the user at > > all... > > For hardened, I think I

[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Alexander Bokovoy via FreeIPA-users
On to, 16 joulu 2021, Sam Morris wrote: On Thu, 2021-12-16 at 15:08 +0200, Alexander Bokovoy wrote: On to, 16 joulu 2021, Sam Morris via FreeIPA-users wrote: > I was wondering what the purpose of 'ipa user-mod > --auth-user-type=hardened' was. In the web UI the option is > labelled > "Hardened

[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Sam Morris via FreeIPA-users
On Thu, 2021-12-16 at 15:08 +0200, Alexander Bokovoy wrote: > On to, 16 joulu 2021, Sam Morris via FreeIPA-users wrote: > > I was wondering what the purpose of 'ipa user-mod > > --auth-user-type=hardened' was. In the web UI the option is > > labelled > > "Hardened Password (by SPAKE or FAST)". > >

[Freeipa-users] Re: Making use of ipa-user-mod --auth-user-type=hardened

2021-12-16 Thread Alexander Bokovoy via FreeIPA-users
On to, 16 joulu 2021, Sam Morris via FreeIPA-users wrote: I was wondering what the purpose of 'ipa user-mod --auth-user-type=hardened' was. In the web UI the option is labelled "Hardened Password (by SPAKE or FAST)". What I found (by setting KRB5_TRACE=/dev/stderr) was that without setting this