[Freeipa-users] Disabling OTP for sudo

[Brian Candler]

Question: can I remove the need for OTP for sudo access, when used with 
an account that has OTP enabled?

All I could find was this mail from mid-2015:

https://www.redhat.com/archives/freeipa-users/2015-July/msg00336.html

It said that sssd would need some changes.

I don't know how sssd itself validates the password provided (is it via 
Kerberos? Does it also depend on authentication indicators being 
implemented?)

Thanks,

Brian.