On 29.03.23 22:30, Ronald Wimmer via FreeIPA-users wrote:
Is it possible to enforce the second factor for a user only when
trying
to login to specific hosts/host groups?
List here says yes...
https://blog.delouw.ch/2016/10/16/freeipa-selective-2fa-authentication-in...
I'm gonna give it a try.
Sorry. Clicked on send to early... As I understand the link above, it
would just be a
ipa host-mod --auth-ind=otp secure.linuxhost.at
instead of enabling the option for some user. Right?
(or ipa service-mod --auth-ind=otp http/secure.linuxhost.at for a
certain service)
But when I set the auth indicator on a host it does not seem to work.
What am I missing?
Cheers,
Ronald