IPA yubikey duo

[Per Qvindesland]

Hi

Is there any information on how to implement IPA with yubikey duo?  I had a look and it seems straightforward enough to implement duo and ssh https://duo.com/docs/duounix but it would be nice to be able to manage it through ipa.

Regards 
Per

Sent from my Commodore 64

[Rob Crittenden]

Per Qvindesland via FreeIPA-users wrote:
> Hi
>
> Is there any information on how to implement IPA with yubikey duo?  I
> had a look and it seems straightforward enough to implement duo and
> ssh https://duo.com/docs/duounix%C2%A0but it would be nice to be able to
> manage it through ipa.

What would you want managed? Near as I can tell from quick read is it
requires building and configuring a pam module. You'd need to get that
into OS repos for the IPA client to be able to support it, and
authselect to be able to configure it.

I don't see anything server-side that IPA would contribute. IPA already
supports SSH keys. I don't know if this would in fact interfere with duo.

rob