DUO 2FA integration with FreeRadius
Steven.Lovaas at ColoState.EDU
Thu Apr 12 23:20:23 CEST 2018
We have it working on campus for some command-line situations, where the piece of network gear can only point to one RADIUS server, but the Duo auth proxy doesn't have a full list of dictionary items. So we point the device (a switch or router) at FreeRADIUS, then proxy from there to the Duo Auth Proxy which does primary authentication at our AD and secondary authentication to the Duo servers in the cloud. Upon receiving success messages for both, the answer travels back through FreeRADIUS, where it has the additional values appended to the answer, and bingo.
University Information Security Officer
Colorado State University
steven.lovaas at colostate.edu<mailto:steven.lovaas at colostate.edu>
Mit der Dummheit kämpfen Götter selbst vergebens.
From: Freeradius-Users <freeradius-users-bounces+steven.lovaas=colostate.edu at lists.freeradius.org> on behalf of Alan DeKok <aland at deployingradius.com>
Sent: Thursday, April 12, 2018 3:14:13 PM
To: Charles Butera; FreeRadius users mailing list
Subject: Re: DUO 2FA integration with FreeRadius
On Apr 12, 2018, at 2:39 PM, Charles Butera via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> Has anyone been able to integrate DUO 2FA with Freeradius?
It looks like some Windows-only proprietary thing.
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users