Re: [EXTERNAL] Re: FAST OTP

2016-08-28 Thread Felix Weissbeck
Hello Glenn On Sonntag, 28. August 2016 01:10:12 CEST Machin, Glenn D wrote: > > Next step was to be able to use it for login/sudo.I modified the > pam_krb5 step to below in system-auth. What I see on the KDC are only > encrypted timestamp preauth. Even if you have configured OTP, auth vi

OTP and kadmin

2017-01-08 Thread Felix Weissbeck
without the otp module). So my question is: Did i miss anything? Is there any possibility to use kadmin remotely with otp/2FA? Or is this not possible at the moment and users have to use kadmin.local? Best Regards Felix Weissbeck Kerbe

Re: OTP and kadmin

2017-01-09 Thread Felix Weissbeck
Hi Ben and thanks for your help. On Sonntag, 8. Januar 2017 12:33:26 CET Benjamin Kaduk wrote: > One thing to try would be separating getting tickets and authenticating > to kadmin, aka > > kinit -c FILE:/tmp/krb5cc_admin -S kadmin/admin -r5m -l5m user/admin > kadmin -c FILE:/tmp/krb5cc_admin -p

Re: Kerberos OTP with FreeRadius

2017-07-07 Thread Felix Weissbeck
Hi, Am Freitag, 7. Juli 2017, 07:54:19 CEST schrieb Brennecke, Simon: > Here is were I am a bit unsure now. I kinda expect "kinit -p simon" now to > either ask me for my password AND my OTP token, or at least fail with some > error message. But instead it succeeds if I just enter my password. As