Re: [Freeipa-users] Windows client authentication with OTP not supported

2017-05-11 Thread Alexander Bokovoy
On pe, 12 touko 2017, Felix Chu wrote: Thanks your info. So it means we cannot use FreeIPA server if we require MFA under Windows 2012? Because our environment is under PCI-DSS cert, PCI-DSS 3.2 has new requirement forcing MFA on non-console access to servers. That's why we look for FreeIPA.

Re: [Freeipa-users] Windows client authentication with OTP not supported

2017-05-11 Thread Felix Chu
: Alexander Bokovoy [mailto:aboko...@redhat.com] Sent: Thursday, May 11, 2017 3:43 PM To: Felix Chu Cc: 'freeipa-users@redhat.com' Subject: Re: [Freeipa-users] Windows client authentication with OTP not supported On to, 11 touko 2017, Felix Chu wrote: >Hi , I would like to implement SSO for my Li

Re: [Freeipa-users] Windows client authentication with OTP not supported

2017-05-11 Thread Alexander Bokovoy
On to, 11 touko 2017, Felix Chu wrote: Hi , I would like to implement SSO for my Linux+Windows2012 machines with MFA. I have installed FreeIPA, it works well for my Linux client authentication with OTP enabled. However, for Windows client, I can only make it works with FreeIPA without OTP.

[Freeipa-users] Windows client authentication with OTP not supported

2017-05-11 Thread Felix Chu
Hi , I would like to implement SSO for my Linux+Windows2012 machines with MFA. I have installed FreeIPA, it works well for my Linux client authentication with OTP enabled. However, for Windows client, I can only make it works with FreeIPA without OTP. The Windows machines are 2012 R2 without