Secure admin account

[ralf-123]

I have set up FreeIPA and have MFA set up on all the new users. Is there a way to add MFA to the default admin user, or disable it until needed? This system will be accessed through the internet, and I would feel better knowing all active accounts are secured via MFA.

[Fryguy]

@ralf-123 Does this help? https://www.manageiq.org/docs/reference/latest/auth/ipa_2fa.html

[ralf-123]

Thanks, I did go through that for the new users I need. But the default admin user is a local user and setting up FreeIPA has no effect on that user.

[ralf-123]

Any thoughts on this?

[kbrock]

I put together a PR with one possible solution. Would this be a possible solution?

#23479

[ralf-123]

Yes, that would work.