By: Mihir Bhusawalkar named 03 Jun 2022 at 6:35 a.m. CDT

6 Responses
Mihir Bhusawalkar gravatar
Hello, I am using gluu server(4.3.1 version) on VMware workstation(OS- Ubuntu 20.X). I am trying to integrate DUO plugin (version 4.3.1) with gluu casa(4.3.1 version). I have followed this URL(https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin)to integrate the DUO plugin with gluu casa and completed all steps mentioned in the URL. I am facing a problem where I am not able to register duodevice on the casa portal. Once I try to register a duo device as admin or a user, it does not register the device on the casa portal. Please note that I have uploaded duo plugin(4.3.1 version) on casa portal and duo script is used as it is which is provided by default on gluu server admin portal. I have also checked casa logs which mentions error - "missing request credentials".Not sure whether I am on the right track related to casa logs. PFA for the casa logs. Any type of assistance is appreciated on the above problem. Thanks and Regards, Mihir

By Madhumita Subramaniam staff 06 Jun 2022 at 5:15 a.m. CDT

Madhumita Subramaniam gravatar
Hi Mihir, Are you sure you have configured these correctly ? 1. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#configure-duo-account 2. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#properties 3. https://github.com/GluuFederation/docs-casa-prod/wiki/DUO-plugin#contents-of-duo_creds_file-as-configured-in-properties The problem is most likely about API creds and not on the Gluu Side

By Mihir Bhusawalkar named 07 Jun 2022 at 3:34 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Madhumita, I believe that I have followed these steps thoroughly. Following are steps which I have followed in detail: I have created two applications (names- Web SDK , Admin API)according to the DUO docs. Then I have pasted its ikey,skey,akey,admin_api_ikey and admin_api_skey under the file named duo_creds.json (location - /etc/certs/ )inside the gluu server. (Note- I have followed Duo Web SDK version 2 (v2) docs). Then, I have configured script with properties (duo_creds_file,duo_host) mentioned in DUO plugin docs. I copied these files(names - casa.xhtml , duologin.xhtml and fullwidth-template.xhtml)inside the gluu server. Location - /opt/gluu/jetty/oxauth/custom/pages/casa (Note - I had to create a new casa directory and then copied all files inside it.At first,the path was only till /opt/gluu/jetty/oxauth/custom/pages/) Also,I copied file (name - oxauth.properties)inside the gluu server(Chroot). Location- - /opt/gluu/jetty/oxauth/custom/i18n/ I created and configured custom attribute (name -oxDuoDevices) on Gluu admin portal. (Note - 'oxDuoDevices' was present by default in LDAP at location /opt/opendj/config/schema/77-customAttributes.ldif in gluu server.) I added DUO plugin on casa portal. These are steps which I followed accordingly. Please note that DUO devices works on my gluu server successfully as a 2FA.Whereas, In casa it fails to register a device. I have attached some screenshots and a video related about my configurations and problem I'm facing. PFA for better understanding. Regards, Mihir Bhusawalkar

By Mihir Bhusawalkar named 08 Jun 2022 at 6:15 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Madhumita, Any update on this?

By Madhumita Subramaniam staff 15 Jun 2022 at 1:40 a.m. CDT

Madhumita Subramaniam gravatar
Hi Mihir, I'm sorry I need a week's time before I look at reproducing and fixing this one.

By Mihir Bhusawalkar named 15 Jun 2022 at 3:06 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Madhumita, Thank you for your response. I will be waiting for your assistance. Regards, Mihir

By Mihir Bhusawalkar named 27 Jun 2022 at 2:05 a.m. CDT

Mihir Bhusawalkar gravatar
Hello Madhumita, Any update on this? Regards, Mihir