[Freeipa-users] different security policy for login(password+otp) and screenlock (password only) for workstation

[Jelle de Jong]

Hello everybody,


I am looking for a way to have different authentication policy for a 
freeia-client logout and screenlock on linux workstations.

When a user logs in I want to use my password+otp (this is working)!

When a user locks it screen I want to be able unlock it with only the 
password.

When a user logs out and back in then it needs to use the password+otp 
again.

I am aware of the security implications for this.

How can I configure this policy?

Kind regards,

Jelle de Jong