Integration of Duo with MIT Kerberos?

[Greg Hudson]

On 4/26/21 2:36 PM, Ben Poliakoff wrote:
> On that thread there was some talk about MIT's implementation, possible
> eventual open sourcing of said implementation and/or creating a
> newer/cleaner implementation using SPAKE-2.
> 
> Did anything ever come if this? We'd certainly love to be able to
> selectively integrate second factors such as Duo with our MIT krb5 KDCs.

Unfortunately no.  The MIT implementation isn't in a releasable state,
and we haven't made any significant progress on implementing second
factors in SPAKE.