Per Qvindesland via FreeIPA-users wrote:
Hi
Is there any information on how to implement IPA with yubikey duo? I
had a look and it seems straightforward enough to implement duo and
ssh https://duo.com/docs/duounix but it would be nice to be able to
manage it through ipa.
What would you want managed? Near as I can tell from quick read is it
requires building and configuring a pam module. You'd need to get that
into OS repos for the IPA client to be able to support it, and
authselect to be able to configure it.
I don't see anything server-side that IPA would contribute. IPA already
supports SSH keys. I don't know if this would in fact interfere with duo.
rob