Re: [Freeipa-users] FreeIPA, Ipsilon, Duo Security integration

2016-12-01 Thread Simo Sorce
On Thu, 2016-12-01 at 11:37 -0800, Mike Jacobacci wrote:
> Hi,
> 
> As of now, we have FreeIPA/FreeRadius with OTP and Ipsilon working
> perfectly.  Now, I am looking at possibly integrating Duo security instead
> of FreeIPA's 2FA.  I am concerned about how it will fit in with Ipsilon and
> FreeIPA... Has anyone else tried this before?  If so, are there any
> pitfalls or problems you have encountered or any general advise?

I think there are issues with the workflow Duo requires and the latency
(sending token via SMS and waiting for user to input).

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] FreeIPA, Ipsilon, Duo Security integration

2016-12-01 Thread Mike Jacobacci
Hi,

As of now, we have FreeIPA/FreeRadius with OTP and Ipsilon working
perfectly.  Now, I am looking at possibly integrating Duo security instead
of FreeIPA's 2FA.  I am concerned about how it will fit in with Ipsilon and
FreeIPA... Has anyone else tried this before?  If so, are there any
pitfalls or problems you have encountered or any general advise?

Cheers,
Mike
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project