Am Fri, May 21, 2021 at 12:36:31PM -0000 schrieb Russ Long via FreeIPA-users:
I have worked around this by removing the self-service permission to
upload SSH keys, and then removing existing keys; however I would
prefer to find a way to explicitly state that only password+otp can be
used for login.
Hi,
I guess for this you have to modify /etc/ssh/sshd_config on every host
to only allow ChallengeResponseAuthentication.
bye,
Sumit
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure