Mobile Site Authentication Using DUO MFA

[shoreypu]

We're looking at using the Mobile Site, but we've discovered that we are unable to authenticate with DUO MFA enabled. If an account has DUO enabled, you are simply kicked back to the login screen. If you disable DUO on the same account, you can successfully login. I've been able to replicated this on multiple accounts.

The page I'm being directed to for the mobile login is https://hostname/nagiosxi/mobile/views/login.php.

Thanks in advance for any assistance.

John

[kfanselow]

Hi John,

A few quick questions:

1) Is DUO MFA working correctly for you in the normal XI interface ?

2) What version of the DUO MFA component do you have installed ? The graphic on page 2 of doc below shows how to find the components page:

https://assets.nagios.com/downloads/nag ... cation.pdf

3) When you say it redirects to "https://hostname/nagiosxi/mobile/views/login.php" is "hostname" being replaced by the correct hostname or is it actually the word "hostname" ?

4) Could you replicate the problem for us and then generate a system profile ?

With a representative user:
- a) Turn on DOU MFA.
- b) Log into XI normally.
- c) Log out of XI
- d) Try logging into the Mobile interface.
- e) Turn off DOU MFA
- f) Log into the Mobile interface
- g) Generate a system profile and send it to me via PM:

Login to the Nagios XI GUI using a web browser.
Click the "Admin" (Top) -> "System Profile" Menu (Left)
Click the "Download Profile" button

Thanks and Best Regards,
Keith

[shoreypu]

Keith,

1) Yes. DUO works in the normal interface. The problem is solely with the mobile interface.

2) DUO 2FA Integration v1.0.2

3) "hostname" represents the Nagios hostname. This problem exists on our Prod and QA servers.

4) Testing completed and system profile sent to you.

Thanks...John

[kfanselow]

Hi John,

Just wanted to give you a quick update -- we were able to replicate the problem and are looking into it further.

Thanks and Best Regards,
Keith