Thanks. After upgrading the openssh to 6.1 and using AuthenticationMethod, it works. -Yogesh Sharma (Sent from my HTC) <div class="gmail_quote">On 22-Dec-2015 8:51 pm, "Sumit Bose" <<a href="mailto:sbose@redhat.com">sbose@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, Dec 22, 2015 at 06:51:25PM +0530, Yogesh Sharma wrote: > Hi List, > > Did not see any options for SSH Keys + OTP or Password, However would like > to know if it is possible with FreeIPA user. > > With Generic SSH , We can use use AuthenticationMethods, but not sure where > to check in FreeIPA. I think there is nothing specific about FreeIPA here. If you set on a IPA client 'AuthenticationMethods = publickey,password' in sshd_config, sshd will check the ssh key first and then ask the user for a password. If the user is configured to use OTP on the IPA server then you have to enter not only the password but the OTP token as well. HTH bye, Sumit > > > > > *Best Regards,* > > *__________________________________________* > > *Yogesh Sharma* > *Email: <a href="mailto:yks0000@gmail.com">yks0000@gmail.com</a> <<a href="mailto:yks0000@gmail.com">yks0000@gmail.com</a>> | Web: <a href="http://www.initd.in" rel="noreferrer" target="_blank">www.initd.in</a> > <<a href="http://www.initd.in/" rel="noreferrer" target="_blank">http://www.initd.in/</a>> * > > *RHCE, VCE-CIA, RACKSPACE CLOUD U Certified* > > <<a href="https://www.fb.com/yks0000" rel="noreferrer" target="_blank">https://www.fb.com/yks0000</a>> <<a href="http://in.linkedin.com/in/yks0000" rel="noreferrer" target="_blank">http://in.linkedin.com/in/yks0000</a>> > <<a href="https://twitter.com/checkwithyogesh" rel="noreferrer" target="_blank">https://twitter.com/checkwithyogesh</a>> > <<a href="http://google.com/+YogeshSharmaOnGooglePlus" rel="noreferrer" target="_blank">http://google.com/+YogeshSharmaOnGooglePlus</a>> > -- > Manage your subscription for the Freeipa-users mailing list: > <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> > Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div>