Re: 2FA policy for provenpackagers is now active
"Leigh Scott" <[email protected]>
| Newsgroups | gmane.linux.redhat.fedora.devel |
|---|---|
| Message-ID | <178238701490.3644660.3952658536066706348@mailman01.rdu3.fedoraproject.org> |
Kashyap Chamarthy wrote: > On Mon, Jun 24, 2024 at 10:13:40AM -0700, Kevin Fenzi wrote: > > On Mon, Jun 24, 2024 at 04:53:22PM GMT, Leigh Scott wrote: > > [...] > > If you do nightly shutdown you would need to enter it many times per week. > > Are you not using sssd-kcm? > > It stores your kerberos credentials so they survive reboots, etc. > > All web logins in infra should honor your kerberos credentials, so if > > you have a valid ticket, it should just log you in without having to > > enter anything. > > tickets are valid for 24hours and can be renewed for 1 week. (Either via > > gnome online accounts or just 'kinit -R') > > Also, I see that we can get a renewable Kerberos ticket that is valid > for 7 days: > $ kinit -r 7d [email protected] > (Then one can just do `kinit -R`, w/o a password prompt.) I followed the new guide Yubikey 5 setup Complete this to get your Base32 string https://docs.fedoraproject.org/en-US/fedora-accounts/user/#twofactor sudo dnf install -y yubikey-manager pcsc-lite pcsc-lite-ccid sudo systemctl enable --now pcscd # This csan be whatever you like "Fedora:leigh" ykman oath accounts add "Fedora:leigh" Enter Base32 string And complete setup on fedoraproject page bashrc edit alias fedcode="ykman oath accounts code | grep 'Fedora' | awk '{print \$2}'" leigh@mpd-pc:~$ fedcode 599930 leigh@mpd-pc:~$ leigh@leigh-pc:~$ fkinit --user=leigh123linux 🔐 FAS password: ••••••••••••••• 🔐 FAS OTP (leave blank if not configured): •••••• Ticket cache: KCM:1000 Default principal: [email protected] Valid starting Expires Service principal 24/06/26 19:24:45 25/06/26 23:24:44 krbtgt/[email protected] renew until 01/07/26 19:24:44 leigh@leigh-pc:~$ -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new