Add passkey management support

[nirik]

With RHEL 9.4, IPA has added passkey support.

IPA:
https://freeipa.readthedocs.io/en/latest/designs/passkeys.html

sssd/local:
https://sssd.io/design-pages/passkey_authentication.html

sssd/kerberos:
https://sssd.io/design-pages/passkey_kerberos.html

[abbra]

FreeIPA stores passkey information similar to public SSH keys. Ideally, Noggin could do a WebAuthn relaying party implementation and store the enrolled key details in a compatible way using python-fido2.

[github-actions]

This issue is stale because it has been open for 60 days with no activity.

[github-actions]

This issue was closed because it has been inactive for 7 days since being marked as stale.

[abompard]

Sorry for the autoclose.

[nirik]

Any ideas how hard this might be or when we might get to it?

It would be much nicer than the otp support we have now...

[nirik]

See also request from mattdm downstream: https://pagure.io/fedora-infrastructure/issue/12376

[abbra]

I'm working on the prerequisites to that. It is hopefully something we'd get around F43...