I see this question came up 6 years ago on this list: https://kerberos.mit.narkive.com/uFhWlsZR/information-request-duo-integration-for-kinit
On that thread there was some talk about MIT's implementation, possible eventual open sourcing of said implementation and/or creating a newer/cleaner implementation using SPAKE-2. Did anything ever come if this? We'd certainly love to be able to selectively integrate second factors such as Duo with our MIT krb5 KDCs. Ben -- Ben Poliakoff Associate Director Technology Infrastructure Services Reed College ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
