Sudo command requires the use of 2FA to succeed after the upgrade from RHEL 9.3 to RHEL 9.4 and 2FA is being enforced after upgrading sssd-2.9.1->2.9.4

Solution Verified - Updated 2025-09-30T19:47:04+00:00 -

English

• No translations currently exist.

Environment

• Red Hat Enterprise 9
• sssd

Issue

• 2FA is being enforced after upgrading 2.9.1->2.9.4

Resolution

• This issue is being tracked in Jira: RHEL-49811
• This has been fixed in sssd version: sssd-2.9.5-4.el9.src.rpm

Root Cause

• After updating from 9.3 to 9.4 sssd started to enforce 2FA for our sudo configuration, while before it was optional, and can't find why did it change.
  downgraded sssd packages from 2.9.4 to 2.9.1 and 2FA went back to being optional,

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.