Hello, everyone.
Our setup:
RHEL9
duo_unix-1.12.1 (but the same result with 2.0.1)
We can successfully authenticate but get “Success. Logging you in…” twice:
$ ssh test
(runlolarun@test.myhost.com) Duo two-factor login for runlolarun
Enter a passcode or select one of the following options:
1. Duo Push to XXX-XXX-9999
2. Phone call to XXX-XXX-9999
3. SMS passcodes to XXX-XXX-9999 (next code starts with: 1)
Passcode or option (1-3): 1
Success. Logging you in...
Success. Logging you in...
With autopush = yes:
Autopushing login request to phone...
Success. Logging you in...
Autopushing login request to phone...
Success. Logging you in...
Thus, it seems we either request autopush twice or there are different successful responses for sending a push request and having a successful response.
/etc/pam.d/sshd
## Now check for Duo exemptions:
auth [success=done default=ignore] pam_access.so accessfile=/etc/security/access-duoexempt.conf
## No exemption; require Duo:
auth [success=done default=ignore] pam_duo.so
auth requisite pam_deny.so
I would appreciate your help.
Thank you!