DUO 2FA integration with FreeRadius

[Lovaas,Steven]

We have it working on campus for some command-line situations, where the piece of network gear can only point to one RADIUS server, but the Duo auth proxy doesn't have a full list of dictionary items. So we point the device (a switch or router) at FreeRADIUS, then proxy from there to the Duo Auth Proxy which does primary authentication at our AD and secondary authentication to the Duo servers in the cloud. Upon receiving success messages for both, the answer travels back through FreeRADIUS, where it has the additional values appended to the answer, and bingo.


================================
Steven Lovaas
University Information Security Officer
Colorado State University
steven.lovaas at colostate.edu<mailto:steven.lovaas at colostate.edu>
970-297-3707
Mit der Dummheit kämpfen Götter selbst vergebens.
================================
________________________________
From: Freeradius-Users <freeradius-users-bounces+steven.lovaas=colostate.edu at lists.freeradius.org> on behalf of Alan DeKok <aland at deployingradius.com>
Sent: Thursday, April 12, 2018 3:14:13 PM
To: Charles Butera; FreeRadius users mailing list
Subject: Re: DUO 2FA integration with FreeRadius

On Apr 12, 2018, at 2:39 PM, Charles Butera via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
>
> Has anyone been able to integrate DUO 2FA with Freeradius?

  It looks like some Windows-only proprietary thing.

  So... no.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html