Duo Authentication Proxy

From DWIKI
Revision as of 14:20, 16 October 2025 by Tony (talk | contribs) (Created page with "To add DUO authentication to LDAP =Links= *https://duo.com/docs/ldap =HOWTO= ==duoauthproxy and Apache== # Outside vhost/directory whatever LDAPCacheTTL 7200 LDAPOpCacheTTL 3600 LDAPRetryDelay 300 ===Inside VirtualHost config=== ====Don't want this on my own network==== SetEnvIf Remote_Addr "192\.168\.1\." AUTH_LDAP=1 AuthBasicProvider ldap <If "-n %{ENV:AUTH_LDAP}"> AuthLDAPURL ldap://ldap.example.com/dc=example,dc=com?sAMAccountName AuthName "Authentic...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

To add DUO authentication to LDAP

Links


HOWTO

duoauthproxy and Apache

  1. Outside vhost/directory whatever
LDAPCacheTTL 7200
LDAPOpCacheTTL 3600
LDAPRetryDelay 300

Inside VirtualHost config

Don't want this on my own network

SetEnvIf Remote_Addr "192\.168\.1\." AUTH_LDAP=1

AuthBasicProvider ldap
<If "-n %{ENV:AUTH_LDAP}">
  AuthLDAPURL ldap://ldap.example.com/dc=example,dc=com?sAMAccountName
  AuthName "Authentication with ldap"
  AuthLDAPBindDN CN=Administrator,CN=Users,DC=example,DC=com
  AuthLDAPBindPassword "f00b4r"
  Require valid-user
 </If>
 <Else>  
  AuthLDAPURL ldap://localhost/dc=example,dc=com?sAMAccountName
  AuthName "Authentication with duo"
  AuthLDAPBindDN CN=Administrator,CN=Users,DC=example,DC=com
  AuthLDAPBindPassword "f00b4r"
  Require valid-user
 </Else>
Retrieved from "https://wiki.dhits.nl/index.php?title=Duo_Authentication_Proxy&oldid=9981"