On 10 August 2018 at 07:24, Gav <kron...@gmail.com> wrote:
[about login_ldap+login_oauth]
> I can successfully have a user authenticate with either (switching the
> login class). However, is it possible to use both as consecutive login
> prompts?
I'm not sure about how to configure it on the login.conf side, but
sshd's ChallengeResponseAuthentication/keyboard-interactive does
support that. You can ensure you are using that on the client side by
adding "-o PreferredAuthentication=keyboard-interactive" on the client
side or disabling PasswordAuthentication in sshd_config.
--
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA (new)
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
