Oof... Indiana University is going to start requiring two factor authentication for sshing onto the compute clusters.
Don't get me wrong, 2fa is good. I just do not like duo (which is the client they chose). It's frequently caused errors when my cell signal or WiFi signal is low where it says the request has timed out in the app but the ldap server is still waiting for a response to its push.
I get in situations often where I have enough service to check my email but not enough to Auth email