[Freeipa-devel] [PATCH 0015] Add support for managing user auth types

Nathaniel McCallum npmccallum at redhat.com
Thu Oct 10 14:51:17 UTC 2013


On Thu, 2013-10-10 at 10:04 +0200, Jan Cholasta wrote:
> On 12.9.2013 22:47, Nathaniel McCallum wrote:
> > On Thu, 2013-09-05 at 00:04 -0400, Nathaniel McCallum wrote:
> >> patch attached
> >
> > Update for ./makeapi attached.
> >
> 
> Is ipaUserAuthType relevant only to Kerberos or to user authentication 
> in general? For example, if "password" is removed from ipaUserAuthType 
> of an user, will I be able to authenticate as that user with LDAP simple 
> authentication?

If only "otp" is set, yes via password+otp.

If only "radius" is set, this behavior is currently undefined. We should
probably define it.

Nathaniel




More information about the Freeipa-devel mailing list