Page 1 of 1
DUO 4 MFA support?
Posted: Mon Nov 01, 2021 12:42 pm
by jpl166
I'm trying to integrate with DUO Federal (which could be its own issue here) and the documentation is extremely simple so I handed it off to our DUO admin and she sent me back a Client ID, a Client Secret, and an API Hostname to use. It didn't actually work, so I started investigating Those terms are just different enough that I asked if the Client ID is the same as an Integration Key and she replied that it used to be called an Integration Key in the old version. As far as she is aware they are deprecating the v2 API entirely in favor of the new v4 API, which leads to the question:
Does Nagios XI integrate with/support the v4 API, and if it does not, any idea when it will?
I'm running 5.8.6, I haven't even gotten this to production use yet. I think MFA is my last hurdle...
Re: DUO 4 MFA support?
Posted: Mon Nov 01, 2021 4:27 pm
by ssax
What OS/version is your XI server running?
I think development would need to update the Duo component to support v4 as I only see Duo v2 files under
/usr/local/nagiosxi/html/includes/components/duo/lib.
But it likely wouldn't work with duo federal without modification as I see this as well and the files only list duosecurity.com:
Additionally, the API host domain for federal editions is duofederal.com instead of the duosecurity.com domain used by Duo standard editions.
I'll need to submit a feature request to development for this.
EDIT: Submitted:
Code: Select all
FR: XI - Duo Component - Duo is going to be deprecating v2 API (which our component uses) , please add v4 support and Duo Federal support
I also see this:
Duo's federal editions strictly require TLS 1.2 secured communications. Ensure that your Duo application versions and the operating systems of the hosts where you install Duo applications also support TLS 1.2.
Which would require you being on at least PHP 5.6 latest or higher:
https://support.nagios.com/kb/article/n ... 7-860.html
Duo Federal info taken from here:
https://duo.com/docs/duo-federal-guide
Re: DUO 4 MFA support?
Posted: Mon Nov 01, 2021 6:05 pm
by ssax
Locking thread, ticket received, we will continue support through the ticket.
Thank you!