Skip to content

Instantly share code, notes, and snippets.

@neil-sabol
Created July 20, 2019 22:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save neil-sabol/ef5b774d2a543c790581f93af3852729 to your computer and use it in GitHub Desktop.
Save neil-sabol/ef5b774d2a543c790581f93af3852729 to your computer and use it in GitHub Desktop.
Sample Duo Authentication Proxy Configuration for LDAP and the Forum Systems test LDAP server (https://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/)
[ad_client]
;https://duo.com/docs/authproxy-reference#ad_client
;https://help.duo.com/s/article/2121?language=en_US
;https://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/
; I am binding on port 389 (no encryption) - #neverinproduction - use 636 (LDAPS) instead
host=ldap.forumsys.com
auth_type=plain
service_account_username=read-only-admin
service_account_password=password
bind_dn=cn=read-only-admin,dc=example,dc=com
search_dn=dc=example,dc=com
username_attribute=uid
[ldap_server_auto]
;https://duo.com/docs/authproxy-reference#ldap-auto
ikey=<<from integration in Duo Admin Console>>
skey=<<from integration in Duo Admin Console>>
api_host=<<from integration in Duo Admin Console>>
failmode=secure
client=ad_client
factors=push
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment