More of a feature request, would like to have ,push# implemented like the Fortinet VPN module has about duo_unix HOT 2 CLOSED

@cgibbsaces perhaps I am misunderstanding the request -- but the Duo PAM module doesn't (and shouldn't) have access to the user's password, so I don't think we can accomplish this.

The reason it's possible for VPNs is because that uses a different product which does receive the user password and can split it, sending each piece to the relevant authenticator.

Even if we somehow did get ahold of the user password and split off the factor selection, the concatenated password would have presumably failed password authentication - the Duo PAM module definitely won't have the capability to modify the password in that case.

from duo_unix.

Closing as impossible for the reasons noted above.

from duo_unix.