0

Does anyone know how to configure a host connected to Freeipa so that 2FA passes by SSH PubKey + OTP, and not by password + OTP?

my sshd_config include:

UsePAM yes
ChallengeResponseAuthentication yes
AuthenticationMethods publickey,keyboard-interactive:pam
Steve Vinoski
  • 19,847
  • 3
  • 31
  • 46
Qudu Duqu
  • 1
  • 2

1 Answers1

0

I'm not sure this is possible, because the pubkey authentication happens from inside sshd even before sshd runs the PAM authentication. But try asking on freeipa-users, the helpful folks there might have an answer.

jhrozek
  • 121
  • 1