Comments (4)
The non-interactive method would also be useful for Continuous Integration scenarios.
Currently we bake all our EC2: AMIs through Wercker, using Packer as a tool within the wercker box.
However as all provisioning happens through a user account unassociated with a duo identity (not being a person it lacks a phone number to push OTP to), CI bakes broke once we switched from login_duo
to pam_duo
. A non interactive implementation would help this scenario.
from duo_unix.
@Hashfyre Since you say the user doesn't have a Duo account, it doesn't sound like a non-interactive 2fa wouldn't fix your use case. Does the 'groups' configuration option help you? It allows some user accounts to bypass Duo, based on group membership of the account.
from duo_unix.
@malandrew Sorry for not responding to your issue, it fell off of our radar. In the future, please feel free to contact [email protected], where we have processes in place to ensure requests are captured and tracked.
Have you tried the 'autopush' configuration feature of duo unix? It may address your use case.
Thanks for using Duo!
from duo_unix.
Closing out this old issue
from duo_unix.
Related Issues (20)
- Non-interactive sessions broken when groups config option is used and motd printed HOT 1
- missing tag 1.11.5 HOT 2
- New HOT 1
- App is blank with two step authentication turned on. HOT 2
- Feature request: default PAM / authselect profiles HOT 4
- Critical Vulnerability: Default Configuration Can Leave Unenrolled Accounts (Including 'root') Exposed HOT 3
- AD Users are bypassed due to groups when groups config option is set, regardless of group. HOT 4
- RHEL 9 / Centos 9 are missing in repo HOT 2
- Are there any tips as to how to get NetDrive or SSHFS to work with pam_duo? HOT 2
- Autopush should be configurable by device, not globally HOT 2
- login_duo: no selection output and automatically pushes to first phone in list with eternal terminal HOT 2
- duo_unix-1.12.1-4.el8 and setuid HOT 3
- Duo Unix 2.x RPM Digests on RHEL 8 with FIPS enabled HOT 7
- Feature request: behavior in situation of missing conf file and not member of groups directive HOT 4
- Bbbb
- More of a feature request, would like to have ,push# implemented like the Fortinet VPN module has HOT 2
- PAM_SUCCESS returned for non-duo users instead of PAM_IGNORE HOT 8
- /usr/sbin/login_duo returning no such file or directory after fresh install of duo HOT 1
- Manpages (login_duo/login_duo.8, pam_duo/pam_duo.8) hardcodes /etc instead of adjusting path according to --prefix
- Choice of the second factor should have a default value
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from duo_unix.