We have it working on campus for some command-line situations, where the piece of network gear can only point to one RADIUS server, but the Duo auth proxy doesn't have a full list of dictionary items. So we point the device (a switch or router) at FreeRADIUS, then proxy from there to the Duo Auth Proxy which does primary authentication at our AD and secondary authentication to the Duo servers in the cloud. Upon receiving success messages for both, the answer travels back through FreeRADIUS, where it has the additional values appended to the answer, and bingo. ================================ Steven Lovaas University Information Security Officer Colorado State University steven.lovaas@colostate.edu<mailto:steven.lovaas@colostate.edu> 970-297-3707 Mit der Dummheit kämpfen Götter selbst vergebens. ================================ ________________________________ From: Freeradius-Users <freeradius-users-bounces+steven.lovaas=colostate.edu@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Thursday, April 12, 2018 3:14:13 PM To: Charles Butera; FreeRadius users mailing list Subject: Re: DUO 2FA integration with FreeRadius On Apr 12, 2018, at 2:39 PM, Charles Butera via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Has anyone been able to integrate DUO 2FA with Freeradius?
It looks like some Windows-only proprietary thing. So... no. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html