cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2717
Views
1
Helpful
3
Replies

Protected password DuoAuthProxy in Linux

Tonny_Andersson
Beginner
Beginner

I have been running DuoAuthProxy successfully in Windows with service_account_password_protected in autproxy.cfg

Now I have migrated DuoAuthProxy to Linux and then service_account_password_protected does not seem to work. If I change it to service_account_password and password in clear text it works.

Is service_account_password_protected not supported in Linux?

1 Accepted Solution

Accepted Solutions

Dooley
Participant
Participant

Hi Tonny,
service_account_password_protected is indeed not supported when running the Duo Authentication Proxy on Linux as we do not have a Linux version of the authproxy_passwd.exe program. Even if you had copied the configuration to a different Windows machine, it still would not work:

The encrypted password or secret is specific to the server where it was generated, and will not work if copied to a different machine. If you have multiple Authentication Proxy servers, be sure to run authproxy_passwd.exe separately on each one.

You can read more about encrypting passwords in the Authentication Proxy Reference Guide here: https://duo.com/docs/authproxy_reference#encrypting-passwords

View solution in original post

3 Replies 3

Dooley
Participant
Participant

Hi Tonny,
service_account_password_protected is indeed not supported when running the Duo Authentication Proxy on Linux as we do not have a Linux version of the authproxy_passwd.exe program. Even if you had copied the configuration to a different Windows machine, it still would not work:

The encrypted password or secret is specific to the server where it was generated, and will not work if copied to a different machine. If you have multiple Authentication Proxy servers, be sure to run authproxy_passwd.exe separately on each one.

You can read more about encrypting passwords in the Authentication Proxy Reference Guide here: https://duo.com/docs/authproxy_reference#encrypting-passwords

DuoKristina
Cisco Employee
Cisco Employee

@Tonny_Andersson

Here’s an article with some recommendations for protecting the Authentication Proxy config file on Linux (in the absence of a built-in tool for encrypting the secret and password strings):

https://help.duo.com/s/article/3886

Duo, not DUO.

Tonny_Andersson
Beginner
Beginner

Thank you very much for sorting this out for me!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links