[Freeipa-users] 2fa with trusted AD users

[Nathaniel McCallum]

On Fri, 2015-05-01 at 13:03 +0000, Andy Thompson wrote:
> Is this possible or do they have to be local IPA accounts?  Looking 
> at options for setting up freeradius with IPA on the backend and 
> utilizing OTP, I've got a test case setup and working for local 
> accounts but a lot of our users are trusted accounts.
> 
> > From what I can tell it is not possible currently but I saw a 
> > reference along the line somewhere about external users.  Can't 
> > really find much  info otherwise.

It is not currently possible. However, I believe Alexander had some
ideas related to this. I've CC'd him.

Nathaniel