[Freeipa-users] 2FA using FreeIPA

[Lukas Slebodnik]

On (13/09/16 03:49), Deepak Dimri wrote:
>Hi All,
>I have below lines added to my sshd_config file for testuser.  
>
>
>
>Match User testuser
>    AuthenticationMethods publickey,password:pam publickey,keyboard-interactive:pam
>I have OTP enable for tapuser in IPA and i am able to login to GUI using the password + OTP.  However when i try to ssh i am getting prompted for first factor then second factor and then it ends with "Permission denied (keyboard-interactive)." error.  What could be wrong here? 
>Regards,Deepak
>
Please provide versions of freeIPA server packages, version of sssd.
And it would be good to seed the exact output of ssh authentication.

LS