Comments (7)
Did you try this on a fresh RHEL 8 box/VM, or one that you had previously tried to install on? Internally we were only able to reproduce this in the second case, but a new box with the published workaround was able to install the package. Hopefully that would work for you as well.
from duo_unix.
One that was already running; its been configured with FIPS per RHEL's FIPS Setup (# fips-mode-setup --enable
) and the digest is still rejected. I had to use the workaround which makes it hard to manage multiple systems as I have to write a custom script just to handle Duo on yum/dnf updates.
from duo_unix.
FIPS seems to be part of the problem - we could reproduce the issue with FIPS enabled. We'll see what we can figure out. Thanks for reporting this.
from duo_unix.
After looking into this further it's unlikely that this is related to the signature. When installing the RPM in FIPS mode I get the following error
$ sudo rpm --install duo_unix-2.0.0-0.el8.x86_64.rpm
erro: unpacking of archive failed on file /etc/duo/login_duo.conf;63bedf4e: cpio: Digest mismatch
error: duo_unix 0:2.0.0-0.el8.x86_64: install failed
I'll continue to look into why this only is occurring in FIPS mode
from duo_unix.
This did end up being a file digest issue. The RPM build spec file wrongly listed MD5 as the _binary_filedigest_algorithm
I'll work on getting a fixed package up shortly.
from duo_unix.
Even using the correct digest algorithm we're still having issues. Please bear with us.
from duo_unix.
We believe this was resolved, please reopen it if it was not.
from duo_unix.
Related Issues (20)
- RHEL 9 / Centos 9 are missing in repo HOT 2
- Are there any tips as to how to get NetDrive or SSHFS to work with pam_duo? HOT 2
- Autopush should be configurable by device, not globally HOT 2
- login_duo: no selection output and automatically pushes to first phone in list with eternal terminal HOT 2
- duo_unix-1.12.1-4.el8 and setuid HOT 3
- Feature request: behavior in situation of missing conf file and not member of groups directive HOT 4
- Bbbb
- More of a feature request, would like to have ,push# implemented like the Fortinet VPN module has HOT 2
- PAM_SUCCESS returned for non-duo users instead of PAM_IGNORE HOT 8
- /usr/sbin/login_duo returning no such file or directory after fresh install of duo HOT 1
- Manpages (login_duo/login_duo.8, pam_duo/pam_duo.8) hardcodes /etc instead of adjusting path according to --prefix
- Choice of the second factor should have a default value
- 8.8.8.8 DNS Server is hardcoded HOT 1
- duo_unix not working with openssl 3.0.8 HOT 4
- Order of DUO Devices Displayed Incorrectly for Users with 10 or More Devices HOT 3
- Duo UNIX PAM module failing on AIX
- Wrong path for duo configuration file in duo_unix-2.0.3 HOT 4
- Autopush with password pushes prompt twice HOT 5
- https_init: result from `RAND_load_file` is unchecked
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from duo_unix.