[Freeipa-users] 2FA and AllowNTHash

[Brian Candler]

On 05/01/2017 10:57, Maciej Drobniuch wrote:
> Maybe I'll paraphrase the question.
>
> It would suffice if I could tell IPA to use pass+otp only instead of 
> both (Password+ pass+otp) for particular hosts.
> So for example users from hosts X can login with OTP only.
>
Sorry, I don't understand that.  What are the two passwords you refer 
to, when you say "Password + pass+otp"?

Can you give an example of the type of exchange that goes on now, and 
what you would like it to do instead?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170105/dbc60cce/attachment.htm>