Kerberos Two Factor Authentication

Question

I am trying to implement an authentication system for a web based application using Kerberos with an LDAP backend. One of the requirements is that it must have two factor authentication.

What options are available to use two factor authentication with MIT Kerberos, preferably open source?

Answer 1

MIT Kerberos now supports integrated TOTP 2FA and 2FA via RADIUS. Thus via RADIUS nearly all 2FA solutions can be used.

If you are looking for an Opensource solution you could use either http://linotp.org or https://privacyidea.org. (Disclaimer: I was/am involved in both).