on server side, ipauserauthtype set as password + otp. [root@xxxxxx /]# ipa user-show ereen-test --raw | grep ipauserauthtype ipauserauthtype: password ipauserauthtype: otp
And I added new configuration in /etc/ssh/sshd_config on my host which is ipa client is installed. GSSAPIAuthentication yes
And /etc/sssd/sssd.conf [prompting/password/sshd] password_prompt = password : [prompting/2fa/sshd] first_prompt = first pwd : second_prompt = second otp :
But all the time, when I try ssh login with ereen-test, the prompt asks "password :" I expect 2 factor asking as I configured like below first_prompt : second_prompt :
Is there other configuration should I set more ?
freeipa-users@lists.fedorahosted.org