Kerberos authentication against FreeIPA - FAST Tunnel support

[Prashant Bapat]

Yes FreeIPA does have the LDAP component and IdP can authenticate against
it but without OTP. Only thru Kerberos OTP is usable.

On 2 March 2016 at 20:53, Peter Schober <peter.schober at univie.ac.at> wrote:

> * Prashant Bapat <prashant at apigee.com> [2016-03-02 15:38]:
> > > I doubt you can, short of writing your own code to invoke native
> > > code to get around the above issue.
> >
> > Are there any pointers? Is there an example code?
>
> I'd first check whether FreeIPA can be used with clients that don't
> support that specific feature/transport.
> Doesn't FreeIPA also offer an LDAP service, if so can you use that for
> authentication?
> Failing that maybe look into setting up a proxy/forwarder on the
> machine hosting the IDP, and point your IDP to that. (No idea whether
> that would work, but seems easier than extending the IDP with native
> code.)
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160302/4ecdacd9/attachment.html>