[Freeipa-users] 2 factor authentication

[Dmitri Pal]

On 08/08/2012 05:32 PM, Rob Crittenden wrote:
> Steven Jones wrote:
>> Hi
>>
>> Is there anyway to use something like a hardware key with IPA for
>> select users (such as myself)?
>>
>> So the idea is I not only have a password but a piece of hardware I
>> need to login to my secure desktop.....
>
> We're looking into 2 factor auth but it isn't supported yet. You might
> want to follow the authhub project, https://fedorahosted.org/AuthHub/
>
> rob
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users

Steven,

Yes the whole idea is to be able to do exactly what you described.
But it is a long way to go. The biggest problem turned out to be on the
client (not on the server) with prompting the user for the right credential.
We are working on it with MIT and this is planned for 1.11 release later
this year. Once it is done in MIT code we will use it on the client and
server to accomplish the desired functionality.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/