Re: [Freeipa-users] Minimum SSSD version for 2 factor

2017-01-03 Thread Lukas Slebodnik 
On (03/01/17 10:15), Sean Hogan wrote:
>
>Morning,
>
>   Hope the Holidays went well for you all.
>
>   I have been trying to find documentation on the required min sssd
>version needed to run otp (2 factor) with no luck.  Was hoping you all
>might know.
>I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high
>enough version to work with IPA 4.X OTP.
>
sssd 1.13 could handle OTP but there is old MIT krb5
and therefore sssd is compiled without OTP feature in rhel6

LS

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Minimum SSSD version for 2 factor

2017-01-03 Thread Jochen Hein 
"Sean Hogan"  writes:

>I have been trying to find documentation on the required min sssd
> version needed to run otp (2 factor) with no luck.  Was hoping you all
> might know.
> I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high
> enough version to work with IPA 4.X OTP.

I'm running 2FA/OTP on Ubuntu 14.04 with the following sssd:
ii  sssd 1.12.5-1~trusty1i386
System Security Services Daemon -- metapackage

What you miss is the prompt "First Factor"/"Second Factor" and you must
concatenate password and OTP at the password prompt. Otherwise it works
fine.

Jochen

-- 
The only problem with troubleshooting is that the trouble shoots back.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Minimum SSSD version for 2 factor

2017-01-03 Thread Sean Hogan 

Disregard... apparently I am blind.   Min is 1.12 per IPA docs.




Sean Hogan









From:   Sean Hogan/Durham/IBM
To: freeipa-users 
Date:   01/03/2017 10:15 AM
Subject:Minimum SSSD version for 2 factor


Morning,

   Hope the Holidays went well for you all.

   I have been trying to find documentation on the required min sssd
version needed to run otp (2 factor) with no luck.  Was hoping you all
might know.
I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high
enough version to work with IPA 4.X OTP.




Thank You
Sean Hogan







-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] Minimum SSSD version for 2 factor

2017-01-03 Thread Sean Hogan 

Morning,

   Hope the Holidays went well for you all.

   I have been trying to find documentation on the required min sssd
version needed to run otp (2 factor) with no luck.  Was hoping you all
might know.
I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high
enough version to work with IPA 4.X OTP.




Thank You
Sean Hogan






-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project