[38912] in Kerberos
Re: Integration of Duo with MIT Kerberos?
daemon@ATHENA.MIT.EDU (Ben Poliakoff)
Thu Apr 29 13:39:15 2021
MIME-Version: 1.0
In-Reply-To: <504DEF47-C53A-412B-B5AA-053DBBEBB0A5@rutgers.edu>
From: Ben Poliakoff <benp@reed.edu>
Date: Thu, 29 Apr 2021 10:36:00 -0700
Message-ID: <CAEamvFAjHuRnEWM-0+cNg9WKy9J_kNM4o9pZHDxbGfR8oFj6Uw@mail.gmail.com>
To: hedrick@rutgers.edu
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Good idea, I'll look into that. Thanks for the suggestion!
On Thu, Apr 29, 2021, 6:37 AM <hedrick@rutgers.edu> wrote:
> Rutgers uses DUO. I did a test integration using the IPA Radius support,
> which I believe is also in MIT Kerberos. Point it at a Radius server that
> supports DUO.
>
> > On Apr 26, 2021, at 2:36 PM, Ben Poliakoff <benp@reed.edu> wrote:
> >
> > I see this question came up 6 years ago on this list:
> >
> >
> https://kerberos.mit.narkive.com/uFhWlsZR/information-request-duo-integration-for-kinit
> >
> > On that thread there was some talk about MIT's implementation, possible
> > eventual open sourcing of said implementation and/or creating a
> > newer/cleaner implementation using SPAKE-2.
> >
> > Did anything ever come if this? We'd certainly love to be able to
> > selectively integrate second factors such as Duo with our MIT krb5 KDCs.
> >
> > Ben
> >
> > --
> > Ben Poliakoff
> > Associate Director
> > Technology Infrastructure Services
> > Reed College
> > ________________________________________________
> > Kerberos mailing list Kerberos@mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
