Update:
Sorry, I missed somehow the IPA UI timeout solved by this setting in
/var/kerberos/krb5kdc/kdc.conf:
[otp]
DEFAULT = {
timeout = 20
retries = 0
strip_realm = false
}
Still searching why the ssh not working with pw+radius. Does anybody configured duo like
this with freeipa for ssh to hosts? Duo have a PAM module, but I already have freeipa and
duoproxy working it would be great if it can handle the login so I not need to deploy the
extra PAM module for that.
Thanks!