CODEWITHSUNDEEP
sshpamone-time-passwordfreeipasssd
Qudu Duqu
Qudu Duqu

Reputation: 1

Freeipa SSH Pubkey + OTP without Password

Does anyone know how to configure a host connected to Freeipa so that 2FA passes by SSH PubKey + OTP, and not by password + OTP?

my sshd_config include:

UsePAM yes
ChallengeResponseAuthentication yes
AuthenticationMethods publickey,keyboard-interactive:pam

Upvotes: 0

Views: 813

Answers (1)

jhrozek
jhrozek

Reputation: 121

I'm not sure this is possible, because the pubkey authentication happens from inside sshd even before sshd runs the PAM authentication. But try asking on freeipa-users, the helpful folks there might have an answer.

Upvotes: 0

Related Questions