Re: [Freeipa-users] Minimum SSSD version for 2 factor
On (03/01/17 10:15), Sean Hogan wrote: > >Morning, > > Hope the Holidays went well for you all. > > I have been trying to find documentation on the required min sssd >version needed to run otp (2 factor) with no luck. Was hoping you all >might know. >I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high >enough version to work with IPA 4.X OTP. > sssd 1.13 could handle OTP but there is old MIT krb5 and therefore sssd is compiled without OTP feature in rhel6 LS -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Minimum SSSD version for 2 factor
"Sean Hogan" writes: >I have been trying to find documentation on the required min sssd > version needed to run otp (2 factor) with no luck. Was hoping you all > might know. > I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high > enough version to work with IPA 4.X OTP. I'm running 2FA/OTP on Ubuntu 14.04 with the following sssd: ii sssd 1.12.5-1~trusty1i386 System Security Services Daemon -- metapackage What you miss is the prompt "First Factor"/"Second Factor" and you must concatenate password and OTP at the password prompt. Otherwise it works fine. Jochen -- The only problem with troubleshooting is that the trouble shoots back. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Minimum SSSD version for 2 factor
Disregard... apparently I am blind. Min is 1.12 per IPA docs. Sean Hogan From: Sean Hogan/Durham/IBM To: freeipa-users Date: 01/03/2017 10:15 AM Subject:Minimum SSSD version for 2 factor Morning, Hope the Holidays went well for you all. I have been trying to find documentation on the required min sssd version needed to run otp (2 factor) with no luck. Was hoping you all might know. I see RHEL 6.8 comes with 1.13 SSSD so was wondering if that would be high enough version to work with IPA 4.X OTP. Thank You Sean Hogan -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project