2factor auth

[Stephen Gallagher]

On Tue, 2011-10-18 at 00:27 -0400, seth vidal wrote:
> On Mon, 2011-10-17 at 22:50 +0100, Tristan Santore wrote:
> > On 17/10/11 22:11, seth vidal wrote:
> > > The biggest problems with the yubikeys is:

It might be of interest to this mailing list to be made aware of some
work being done jointly between the SSSD, FreeIPA, MIT Kerberos and
Yubico development teams.

The plan is for SSSD and FreeIPA to support (via extensions made to MIT
Kerberos) Yubikey as a mechanism for acquiring a Kerberos TGT from
FreeIPA. We have a proof-of-concept already available (demonstrated at
this past Red Hat Summit) and work is ongoing on this.

It might be worth revisiting the discussion about a potential FAS3 built
atop the upcoming FreeIPA v3 (which will have this support).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20111018/f859cdc0/attachment.bin