Re: [Freeipa-users] Kerberos and 2fa with mac OS X client

2016-12-15 Thread Sumit Bose
On Thu, Dec 15, 2016 at 06:50:53PM +, Mark Steele wrote: > Still no luck. > > > klist > Credentials cache: API:4FE16A36-A5AB-476F-8B49-4B427E816279 > Principal: ad...@int.domain.com > > IssuedExpires Principal > Dec 15 13:45:09 2016 Dec 16 13:45:07 20

Re: [Freeipa-users] Kerberos and 2fa with mac OS X client

2016-12-15 Thread Alexander Bokovoy
On to, 15 joulu 2016, Mark Steele wrote: Still no luck. klist Credentials cache: API:4FE16A36-A5AB-476F-8B49-4B427E816279 Principal: ad...@int.domain.com IssuedExpires Principal Dec 15 13:45:09 2016 Dec 16 13:45:07 2016 krbtgt/int.domain@int.domain.c

Re: [Freeipa-users] Kerberos and 2fa with mac OS X client

2016-12-15 Thread Mark Steele
Still no luck. klist Credentials cache: API:4FE16A36-A5AB-476F-8B49-4B427E816279 Principal: ad...@int.domain.com IssuedExpires Principal Dec 15 13:45:09 2016 Dec 16 13:45:07 2016 krbtgt/int.domain@int.domain.com KRB5_TRACE=/dev/stdout kinit --fast

Re: [Freeipa-users] Kerberos and 2fa with mac OS X client

2016-12-15 Thread Alexander Bokovoy
On to, 15 joulu 2016, Sumit Bose wrote: On Thu, Dec 15, 2016 at 03:38:14PM +, Mark Steele wrote: Hi, Has anyone managed to make this work and if so, is there some documentation for doing so? I can successfully authenticate to my linux servers using 2FA, but am unable to get my Mac to be a

Re: [Freeipa-users] Kerberos and 2fa with mac OS X client

2016-12-15 Thread Sumit Bose
On Thu, Dec 15, 2016 at 03:38:14PM +, Mark Steele wrote: > Hi, > > Has anyone managed to make this work and if so, is there some documentation > for doing so? > > I can successfully authenticate to my linux servers using 2FA, but am unable > to get my Mac to be able to get a ticket with kin