Comments (4)
Thanks for using Duo!
What version of duo unix are you using? How have you integrated Duo - with ssh or as a pam module? Are you using the 'group' option in your duo configuration? If you are using the 'group' filter, users not in the specified group will bypass 2fa.
It sounds like you aren't yet positive that the issue you're seeing is failmode related. If you disable connectivity between your unix host and Duo's service, can you reproduce the behavior? You can disable connectivity, for instance, by adding your Duo hostname to the loopback IP in your /etc/hosts file.
from duo_unix.
On Jul 21, 2015, at 8:52 AM, BradleyHiggins [email protected] wrote:
Thanks for using Duo!
Great product!
What version of duo unix are you using? How have you integrated Duo - with ssh or as a pam module? Are you using the 'group' option in your duo configuration? If you are using the 'group' filter, users not in the specified group will bypass 2fa.
I am using version 1.9.14 of duo_unix, and I have integrated it using ssh. I am not using the group option.
It sounds like you aren't yet positive that the issue you're seeing is failmode related. If you disable connectivity between your unix host and Duo's service, can you reproduce the behavior? You can disable connectivity, for instance, by adding your Duo hostname to the loopback IP in your /etc/hosts file.Actually, I am pretty sure it is related to failmode because normally I do have duo_login ask me to authenticate, but sometimes it doesn't. I don't think my internet connectivity is all that bad so I suspect more of an issue elsewhere and I was hoping to find out in syslog why it had to go to "safe" failmode. After all, I am with ssh coming in that same internet.
from duo_unix.
Actually, I am pretty sure it is related to failmode because normally I do have duo_login ask me to authenticate, but sometimes it doesn't.
I would like to confirm that you're encountering a failmode scenario. Could you try to reproduce the behavior by disabling the connectivity between your unix host and Duo's servers? You can disable the connectivity by adding your Duo hostname to the loopback IP in your /etc/hosts file. Then, run login_duo -d and see whether an error mesage is displayed or not.
My problem is that I did not get any message in syslog (or on the screen when I ran duo_unix -d manually) ...
Shouldn't all failures be logged?
When I try this test, I see a message written to the console. This same message should be written to syslog during a regular, non-debug login scenario. Please try this, and confirm that you don't see a message reported on your console.
from duo_unix.
I was waiting for this to occur again, but it hasn't. So I'm going to close this.
from duo_unix.
Related Issues (20)
- AD Users are bypassed due to groups when groups config option is set, regardless of group. HOT 4
- RHEL 9 / Centos 9 are missing in repo HOT 2
- Are there any tips as to how to get NetDrive or SSHFS to work with pam_duo? HOT 2
- Autopush should be configurable by device, not globally HOT 2
- login_duo: no selection output and automatically pushes to first phone in list with eternal terminal HOT 2
- duo_unix-1.12.1-4.el8 and setuid HOT 3
- Duo Unix 2.x RPM Digests on RHEL 8 with FIPS enabled HOT 7
- Feature request: behavior in situation of missing conf file and not member of groups directive HOT 4
- Bbbb
- More of a feature request, would like to have ,push# implemented like the Fortinet VPN module has HOT 2
- PAM_SUCCESS returned for non-duo users instead of PAM_IGNORE HOT 8
- /usr/sbin/login_duo returning no such file or directory after fresh install of duo HOT 1
- Manpages (login_duo/login_duo.8, pam_duo/pam_duo.8) hardcodes /etc instead of adjusting path according to --prefix
- Choice of the second factor should have a default value
- 8.8.8.8 DNS Server is hardcoded HOT 1
- duo_unix not working with openssl 3.0.8 HOT 4
- Order of DUO Devices Displayed Incorrectly for Users with 10 or More Devices HOT 3
- Duo UNIX PAM module failing on AIX
- Wrong path for duo configuration file in duo_unix-2.0.3 HOT 4
- Autopush with password pushes prompt twice HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from duo_unix.