Page 1 of 1

Mobile Site Authentication Using DUO MFA

Posted: Mon Dec 20, 2021 3:46 pm
by shoreypu
We're looking at using the Mobile Site, but we've discovered that we are unable to authenticate with DUO MFA enabled. If an account has DUO enabled, you are simply kicked back to the login screen. If you disable DUO on the same account, you can successfully login. I've been able to replicated this on multiple accounts.

The page I'm being directed to for the mobile login is https://hostname/nagiosxi/mobile/views/login.php.

Thanks in advance for any assistance.

John

Re: Mobile Site Authentication Using DUO MFA

Posted: Tue Dec 21, 2021 11:42 am
by kfanselow
Hi John,

A few quick questions:

1) Is DUO MFA working correctly for you in the normal XI interface ?

2) What version of the DUO MFA component do you have installed ? The graphic on page 2 of doc below shows how to find the components page:

https://assets.nagios.com/downloads/nag ... cation.pdf

3) When you say it redirects to "https://hostname/nagiosxi/mobile/views/login.php" is "hostname" being replaced by the correct hostname or is it actually the word "hostname" ?

4) Could you replicate the problem for us and then generate a system profile ?

With a representative user:
- a) Turn on DOU MFA.
- b) Log into XI normally.
- c) Log out of XI
- d) Try logging into the Mobile interface.
- e) Turn off DOU MFA
- f) Log into the Mobile interface
- g) Generate a system profile and send it to me via PM:

Login to the Nagios XI GUI using a web browser.
Click the "Admin" (Top) -> "System Profile" Menu (Left)
Click the "Download Profile" button

Thanks and Best Regards,
Keith

Re: Mobile Site Authentication Using DUO MFA

Posted: Wed Dec 22, 2021 7:50 am
by shoreypu
Keith,

1) Yes. DUO works in the normal interface. The problem is solely with the mobile interface.

2) DUO 2FA Integration v1.0.2

3) "hostname" represents the Nagios hostname. This problem exists on our Prod and QA servers.

4) Testing completed and system profile sent to you.

Thanks...John

Re: Mobile Site Authentication Using DUO MFA

Posted: Wed Dec 22, 2021 4:50 pm
by kfanselow
Hi John,

Just wanted to give you a quick update -- we were able to replicate the problem and are looking into it further.

Thanks and Best Regards,
Keith