[Users] two factor

[David Sommerseth]

On 05/10/18 14:11, Thor wrote:
> Do any of you use two factor login to zimbra?
> if so what do you do with activesync? or do two factor work there as well?

Using a combination of the two other responses.

- Zextras Mobile with mobile passwords
- FreeIPA with OTP enabled (yubikey, FreeOTP, AndOTP)

Zimbra needs to be configured with LDAP against FreeIPA for this to work.  But
you can have the Kerberos configured in parallel, which also gives you GSSAPI
for IMAP and SPNEGO for the webmail.  But that said, the Kerberos support in
Zimbra is half-hearted.

But OTP works quite using the LDAP approach.


--
kind regards,

David Sommerseth