<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"></style> </head> <body dir="ltr"> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr"> <p>Hi Linux folks,</p> <p><br> </p> <p>After setting up the one-way trust between IPA - AD, users from AD can authenticate to Linux resources using their own keys, that's great but now I want to add a second factor authentication for those AD users which is public key authentication, is that possible?</p> <p><br> </p> <p>I mean we can add a field to AD named "ssh-key" but how to use that field for 2 nd fact authentication within IPA, or is there any other option ?</p> <p><br> </p> <p>Regards,</p> <p><br> </p> <div id="Signature"><br> </div> </div> </body> </html>