Charles,
Our campus uses DUO. We're wondering whether it's possible to
use that from IPA. My main concern is that user interaction can take time.
Yes, it is possible and we currently utilize DUO on restricted
systems. Our IPA domain consists of an AD Trust (bulk of users) and
IDM-only users.
HTH,
John DeSantis
Il giorno ven 11 feb 2022 alle ore 12:40 Charles Hedrick via
FreeIPA-users <freeipa-users(a)lists.fedorahosted.org> ha scritto:
>
Our campus uses DUO. We're wondering whether it's possible to
use that from IPA. My main concern is that user interaction can take time.
>
> I see that it's possible to raise the timeout. But is that safe to do? I'm
wondering whether otpd is really designed to have lots of threads waiting for the user to
respond.
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
> Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure