On (28/07/17 15:39), Devin Acosta via FreeIPA-users wrote:
I have noticed that when I enable FreeIPA all my CentOS 7.x boxes work
SSH just fine, however none of my CentOS 6 boxes work. I read that 2FA
didn't come until CentOS 7.1. So my question is does 2FA via SSH not work
at all if you have a RHEL 6 / CentOS 6 server? Just curious.
2FA (OTP) cannot work on rhel6 because there is old version
of krb5-libs and therefore such feature is disabled in sssd
at compile time.
You need to use et least l7