https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877088#M166 <DIV class="duo-migrated-content"><P>For Duo LDAPS, should any change be done in Duo Admin panel as mentioned in this link ?</P><ASIDE class="onebox allowlistedgeneric"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" style="width: 192px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191281iC3F3C47C787F8058/image-size/large?v=v2&amp;px=999" role="button" title="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" alt="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" /></span> <A href="https://www.petenetlive.com/KB/Article/0001647" target="_blank" rel="noopener nofollow ugc" title="12:36PM - 02 February 2020">PeteNetLive – 2 Feb 20</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/353;"><span class="lia-inline-image-display-wrapper" image-alt="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191437i1618688351AC32A4/image-size/large?v=v2&amp;px=999" role="button" title="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" alt="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" /></span></DIV> <H3><A href="https://www.petenetlive.com/KB/Article/0001647" target="_blank" rel="noopener nofollow ugc">Duo: Migrate from LDAP to LDAPS | PeteNetLive</A></H3> <P>If you have a Duo Auth Proxy using LDAP and you want to Migrate to LDAPS here's how to do it.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> </DIV> Mon, 12 Apr 2021 12:00:51 GMT manvik 2021-04-12T12:00:51Z https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877084#M162 <DIV class="duo-migrated-content"><P>Currently DUO is authenticated to LDAP via plaintext. We would like to change it to LDAPS, ie connect DUO to AD via LDAPS.<BR /> Can someone tell what are the changes to be done in DUO config file for this.<BR /> Also, any downtime required for this?</P></DIV> Thu, 04 Mar 2021 05:29:18 GMT https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877084#M162 manvik 2021-03-04T05:29:18Z https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877085#M163 <DIV class="duo-migrated-content"><P>Assuming you’re using the Authentication Proxy, look here, especially the Optional section: <A href="https://duo.com/docs/authproxy-reference#client-sections" class="inline-onebox" rel="noopener nofollow ugc">Duo Authentication Proxy Reference | Duo Security</A><BR /> You’ll need to change or add “transport”, add “ssl_ca_certs_file” and have the CA root cert and chain that issued the cert on your DC in a file for that entry to point at.</P> <P>You have to restart the proxy, so yes to downtime…</P></DIV> Thu, 04 Mar 2021 14:50:01 GMT https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877085#M163 Ken Stieers 2021-03-04T14:50:01Z https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877086#M164 <DIV class="duo-migrated-content"><P>Thank you <A class="mention" href="https://community.duo.com/u/kstieers">@kstieers</A><BR /> Currently authentication is requested from Cisco ASA and DUO sends to AD.<BR /> Will there be any change in ASA to Duo config too ?</P></DIV> Fri, 05 Mar 2021 09:53:19 GMT https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877086#M164 manvik 2021-03-05T09:53:19Z https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877087#M165 <DIV class="duo-migrated-content"><P>So if already doing LDAPS from ASA to the DUO Authentication Proxy, then no, no change needed…</P></DIV> Fri, 05 Mar 2021 15:50:12 GMT https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877087#M165 Ken Stieers 2021-03-05T15:50:12Z https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877088#M166 <DIV class="duo-migrated-content"><P>For Duo LDAPS, should any change be done in Duo Admin panel as mentioned in this link ?</P><ASIDE class="onebox allowlistedgeneric"> <HEADER class="source"> <span class="lia-inline-image-display-wrapper" image-alt="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" style="width: 192px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191281iC3F3C47C787F8058/image-size/large?v=v2&amp;px=999" role="button" title="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" alt="2X_0_0551c3e9c3fb97793dc6a4505e5e60f2f3050d71.png" /></span> <A href="https://www.petenetlive.com/KB/Article/0001647" target="_blank" rel="noopener nofollow ugc" title="12:36PM - 02 February 2020">PeteNetLive – 2 Feb 20</A> </HEADER> <ARTICLE class="onebox-body"> <DIV class="aspect-image" style="--aspect-ratio:690/353;"><span class="lia-inline-image-display-wrapper" image-alt="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" style="width: 690px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/191437i1618688351AC32A4/image-size/large?v=v2&amp;px=999" role="button" title="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" alt="2X_1_17a23a40a36320db4f78b74d6a49c52ea141d3a0.jpeg" /></span></DIV> <H3><A href="https://www.petenetlive.com/KB/Article/0001647" target="_blank" rel="noopener nofollow ugc">Duo: Migrate from LDAP to LDAPS | PeteNetLive</A></H3> <P>If you have a Duo Auth Proxy using LDAP and you want to Migrate to LDAPS here's how to do it.</P> </ARTICLE> <DIV class="onebox-metadata"> </DIV> <DIV style="clear: both"></DIV> </ASIDE> </DIV> Mon, 12 Apr 2021 12:00:51 GMT https://community.cisco.com/t5/managing-users/duo-with-ad-ldaps/m-p/4877088#M166 manvik 2021-04-12T12:00:51Z