Linux DuoConnect v2.0.7 issue on Red Hat 8

[dfouch]

Tried to update DuoConnect 2.0.4 to the latest 2.0.7 and get the following error: duoconnect: /lib64/libc.so.6: version `GLIBC_2.34' not found (required by duoconnect).

[DuoMario]

Hi @dfouch, appreciate you reaching out!

I am on the engineering team; we haven't seen this issue yet but it's likely due to our team updating the builder images which are linked to a later version of glibc. It looks like at the moment, RHEL 8 (and CentOS Stream 8 ) only support up to glibc-2.28. RHEL 9+ support glibc-2.34+ (if the data on distrowatch is correct).

At the moment, downgrading duoconnect to v2.0.4 (link: https://dl.duosecurity.com/DuoConnect-2.0.4.tar.gz) should unblock your system and ignore the update that the Duo Network Gateway advises when connecting to an SSH server.

We are going to internally investigate if we can remove the dependency on glibc for DuoConnect on Linux. If we are able to successfully remove the dependency, we can provide a preview 2.0.8 release for you to test. Would that be helpful? We will begin investigation today and hope to have more information early next week!

We'll also make a note on our release notes page about this glibc deprecation as well.

[dfouch]

I will look at using the other version and update the post.

[DuoMario]

Hi @dfouch! We should have a preview release of DuoConnect with a glibc fix soon. How did downgrading work for you?

[dfouch]

I apologize for not updating the post. The issue is the site we were trying to connect with wants v2.0.8 and we are still using v2.0.4. We were attempting to comply with their request, by upgrading to v2.0.8 when we discovered the glibc dependency issue. So we were unable to upgrade. So we rolled back to v2.0.4. Our users, are still able to gain access to the site but they are presented with a warning box asking them to upgrade. The concern is they will loose connectivity when the remote site says v2.0.4 is no longer accepted. Thank you for the update.

[DuoMario]

Absolutely no worries. I'll make sure to ping this thread once the beta release is publicly available. Your users will be OK for now, as the Duo Network Gateway in conjunction with Duo handles deprecating older DuoConnect versions and 2.0.4 is not considered deprecated at this time, and definitely not before we have a release in place for Linux to resolve the glibc issue.