IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

client: enable ChallengeResponseAuthentication in sshd_config

Browse Source 
In order to enable SSSD smart prompting and allow it to ask for 1FA and
2FA separately, ChallengeResponseAuthentication should be set to yes.
This change will enable better processing of the 2FA value and it will
also enable other features, like allow SSSD to make the 2FA option in
some cases and have a way of informing user that 2FA is optional.

https://fedorahosted.org/freeipa/ticket/5703

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
This commit is contained in:
Martin Basti
2016-03-10 19:01:33 +01:00
committed by Jan Cholasta
parent d6f03da753
commit 04d4519ed5
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
client/ipa-client-install
View File

@@ -1399,6 +1399,7 @@ def configure_sshd_config(fstore, options):
'KerberosAuthentication': 'no',
'GSSAPIAuthentication': 'yes',
'UsePAM': 'yes',
'ChallengeResponseAuthentication': 'yes',
}
if options.sssd and file_exists(paths.SSS_SSH_AUTHORIZEDKEYS):