IPA yubikey duo

[Per Qvindesland]

Hi 

Is there any information on how to implement IPA with yubikey duo?  I had a look and it
seems straightforward enough to implement duo and ssh https://duo.com/docs/duounix but it
would be nice to be able to manage it through ipa.

Regards 
Per


Sent from my Commodore 64

[Rob Crittenden]

Per Qvindesland via FreeIPA-users wrote:
>  Hi 
>  
>  Is there any information on how to implement IPA with yubikey duo?  I
>  had a look and it seems straightforward enough to implement duo and
>  ssh https://duo.com/docs/duounix but it would be nice to be able to
>  manage it through ipa. 
What would you want managed? Near as I can tell from quick read is it
requires building and configuring a pam module. You'd need to get that
into OS repos for the IPA client to be able to support it, and
authselect to be able to configure it.

I don't see anything server-side that IPA would contribute. IPA already
supports SSH keys. I don't know if this would in fact interfere with duo.

rob