Gluu Casa - DUO device does not get registered on casa portal

By: Mihir Bhusawalkar named 03 Jun 2022 at 6:35 a.m. CDT

21 Responses
Mihir Bhusawalkar gravatar
Hello, I am using gluu server(4.3.1 version) on VMware workstation(OS- Ubuntu 20.X). I am trying to integrate DUO plugin (version 4.3.1) with gluu casa(4.3.1 version). I have followed this URL(https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin)to integrate the DUO plugin with gluu casa and completed all steps mentioned in the URL. I am facing a problem where I am not able to register duodevice on the casa portal. Once I try to register a duo device as admin or a user, it does not register the device on the casa portal. Please note that I have uploaded duo plugin(4.3.1 version) on casa portal and duo script is used as it is which is provided by default on gluu server admin portal. I have also checked casa logs which mentions error - "missing request credentials".Not sure whether I am on the right track related to casa logs. PFA for the casa logs. Any type of assistance is appreciated on the above problem. Thanks and Regards, Mihir
Gluu 4.3 Ubuntu 20.04
closed

Answers

By Madhumita Subramaniam staff 06 Jun 2022 at 5:15 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Hi Mihir, Are you sure you have configured these correctly ? 1. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#configure-duo-account 2. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#properties 3. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#contents-of-duo_creds_file-as-configured-in-properties The problem is most likely about API creds and not on the Gluu Side

By Mihir Bhusawalkar named 07 Jun 2022 at 3:34 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, I believe that I have followed these steps thoroughly. Following are steps which I have followed in detail: I have created two applications (names- Web SDK , Admin API)according to the DUO docs. Then I have pasted its ikey,skey,akey,admin_api_ikey and admin_api_skey under the file named duo_creds.json (location - /etc/certs/ )inside the gluu server. (Note- I have followed Duo Web SDK version 2 (v2) docs). Then, I have configured script with properties (duo_creds_file,duo_host) mentioned in DUO plugin docs. I copied these files(names - casa.xhtml , duologin.xhtml and fullwidth-template.xhtml)inside the gluu server. Location - /opt/gluu/jetty/oxauth/custom/pages/casa (Note - I had to create a new casa directory and then copied all files inside it.At first,the path was only till /opt/gluu/jetty/oxauth/custom/pages/) Also,I copied file (name - oxauth.properties)inside the gluu server(Chroot). Location- - /opt/gluu/jetty/oxauth/custom/i18n/ I created and configured custom attribute (name -oxDuoDevices) on Gluu admin portal. (Note - 'oxDuoDevices' was present by default in LDAP at location /opt/opendj/config/schema/77-customAttributes.ldif in gluu server.) I added DUO plugin on casa portal. These are steps which I followed accordingly. Please note that DUO devices works on my gluu server successfully as a 2FA.Whereas, In casa it fails to register a device. I have attached some screenshots and a video related about my configurations and problem I'm facing. PFA for better understanding. Regards, Mihir Bhusawalkar
plugin_version.JPG attributes.JPG duodevice_attr_config.JPG gluu.webm custom_property.JPG

By Mihir Bhusawalkar named 08 Jun 2022 at 6:15 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, Any update on this?

By Madhumita Subramaniam staff 15 Jun 2022 at 1:40 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Hi Mihir, I'm sorry I need a week's time before I look at reproducing and fixing this one.

By Mihir Bhusawalkar named 15 Jun 2022 at 3:06 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, Thank you for your response. I will be waiting for your assistance. Regards, Mihir

By Mihir Bhusawalkar named 27 Jun 2022 at 2:05 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, Any update on this? Regards, Mihir

By Madhumita Subramaniam staff 01 Aug 2022 at 1:30 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Working on this today.

By Madhumita Subramaniam staff 01 Aug 2022 at 3:46 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Hi Mihir, Sorry for the long silence on this one, I am unable to reproduce this issue. I want to rule out that it is an issue with the creds. (The logs clearly indicate that) I am emailing you some test-case credentials. Please check and revert with your findings.

By Mohib Zico Account Admin 01 Aug 2022 at 9:22 a.m. CDT

Copy
Mohib Zico gravatar
Mihir, A request, please don't share that credential with anyone else. :-)

By Mihir Bhusawalkar named 02 Aug 2022 at 2:14 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, I will try these credentials and let you know in somedays. Regards, Mihir

By Mihir Bhusawalkar named 02 Aug 2022 at 2:15 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Mohib, Won't be sharing these credentials with anyone. Regards, Mihir

By Mihir Bhusawalkar named 02 Aug 2022 at 3:01 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Dear Madhumita, Can you please provide the following details, As I will need this to add as a property inside for the DUO script. Property- duo_host Description- URL of the Duo API Server Example- api-random.duosecurity.com Regards, Mihir

By Madhumita Subramaniam staff 03 Aug 2022 at 1:11 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Sent.

By Mohib Zico Account Admin 16 Aug 2022 at 10:39 a.m. CDT

Copy
Mohib Zico gravatar
Hello Mihir, Just touching base to know how things are going there. Need any assistance anywhere? Thanks!

By Mihir Bhusawalkar named 18 Aug 2022 at 6:08 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Mohib, Sorry for the delay. I have tried the provided credentials and it has worked fine for me. In casa, I am able to register my device successfully. Regards, Mihir Bhusawalkar

By Mihir Bhusawalkar named 18 Aug 2022 at 6:20 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Dear Madhumita, Can you please elaborate about how you have created admin credentials(admin_api_skey and admin_api_ikey) on duo admin portal ? I have followed same steps from the below link and it does not work for me during casa duo device registration. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin NOTE : In past, I made all credentials (Integration key (ikey), Secret key (skey) , akey, admin_api_skey and admin_api_ikey) from DUO admin portal of 30 days free trial. Regards, Mihir Bhusawalkar

By Madhumita Subramaniam staff 23 Aug 2022 at 1 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Hi Mihir, this is the document https://duo.com/docs/duoweb

By Mihir Bhusawalkar named 25 Aug 2022 at 1:43 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Madhumita, I will try this and get back to you within a week. Regards, Mihir

By Madhumita Subramaniam staff 12 Sep 2022 at 9:14 a.m. CDT

Copy
Madhumita Subramaniam gravatar
Mihir, The old APIs were deprecated. Take a look at this - https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations/duo-universal-prompt

By Mohib Zico Account Admin 25 Sep 2022 at 11:21 p.m. CDT

Copy
Mohib Zico gravatar
Hi Mihir, Any update please? Idle tickets will be closed automatically.

By Mihir Bhusawalkar named 07 Oct 2022 at 12:26 a.m. CDT

Copy
Mihir Bhusawalkar gravatar
Hello Mohib, I will close this ticket for now. I will try this once I get time. Regards, Mihir

Post an answer