Hello! We’re going to be implementing Duo for Windows Logon in the next couple of months and I wanted to get some thoughts on people’s opinions of FailOpen vs. Offline Access Codes. In our organization, we have dozens of users who are rotating around...
Forum Posts
Hello, I’m trying to setup 2FA using Duo Push with a Windows 2019 RRAS server. I have everything successfully working using PAP and the [ad_client] setting, but I’m concerned about issues with Windows Updates breaking PAP VPN settings, hence trying t...
hi , i have installed Duo Auth Proxy and while installing windows client i have checked proxy server option and give my DUO AUTH proxy IP and PORT number 389. But i got an error says that connection with the server coulnot be established. i logged in...
Can you use the fqdn of the Active Directory Domain instead of specifying the FQDN of all the individual domain controllers you have in your domain. For example use the config below: [ad] host=domain.com instead of [ad] host=dc1.domain.com host_2=dc...
I’ve installed the authentication proxy on a utility server and have tested directory syncing, that all works fine. The connection tool reports no issues. I was wondering in the Meraki MX67 device, I added the Duo Authentication Proxy Server as anot...
Is it possible to use append mode with VMware View? I have everything working with default “push” mode but if I try using append mode - something like “password,123456” it seems to pass the DUO authentication process but fails the VMware authenticati...
Hello team just looking for some troubleshotting steps What if after deploying Duo it wont appear on Reboot . there should be probably a MAc settings for which i may not aware of which could block the MFA to prompt on new console. Any suggestion woul...
I have followed the steps in the linked article What is the least-privileged Duo Authentication Proxy Windows service account configuration to setup a Group Managed Service Account (gMSA). I have used Group Policy to configure 1) the security on the...
Hey folks - hope you’re all keeping well! Just following through this guide to get Unifi VPN + Duo Authentication Proxy set up together, and my EdgeRouter X is happily sending RADIUS requests to DAP, but DAP is not liking the response from Windows Se...
I have Duo Security set up on a MAC. For some reason there is no 2FA prompt when the machine is locked. When the account is logged out it works fine. Is there a way to set up it so it enforces 2FA authentication after the machine is logged out or loc...
Resolved! Duo Proxy excpetion to ldap group
I have integrated DUO proxy with FreeIPA, however I’m not able to allow a specific group to bypass the DUO as consequence I need to add user by user as exception, is there any way for that? According documentation I could inform the group as exempt_o...
Setting up Duo for my switches and am running into an issue when using the DuoAuthProxy as my RADIUS server. I have the LDAP Proxy pulling one AD group of users into Duo, then the RADIUS allows only those group members. My Cisco switches (5548) work ...
I am struggling on setting up DUO 2FA on the L2TP VPN with DUO proxy on Windows server. The settings between Unifi and Windows DUO proxy is pretty straight forward. I have experience in setting DUO using Cisco ASA <> Windows but I was unable to make ...
I’m trying to get the securty_group_dn portion of the auth proxy working, but as soon as I add it, my test user stops working. My AD configuration is very simple but I’ve also tried adding an OU with a group under it and that does not work either. I’...
Hi, I have a problem getting a Duo Mobile Push notification after authenticating VPN access from Windows 10 L2TP Vpn client. The setup is: Radius server is running on a Unifi dream machine proDuo authentication Proxy is running on a Ubuntu 20.04LTS o...
