We are implementing OTP for a new deployment and we can log in with the otp codes however when trying to sudo it fails. We would like to use the 2fa to log in but single factor is ok for sudo escalation. Is OTP supposed to be getting involved when issuing sudo commands?
bob@ipa-client1$ sudo cat /etc/resolv.conf
Sorry, try again.
sudo: 1 incorrect password attempt