cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
889
Views
0
Helpful
1
Replies

ASA VPN DUO auth failure

Qingguo Zhang
Cisco Employee
Cisco Employee

Hi experts

I am testing anyconnect VPN using auth proxy. Below are error message and configuration file.

Log shows “Invalid integration key” error , but I am sure there is no problem for integration key.
is there Any further suggestion ?

File “duoauthproxy\lib\duo_async.pyc”, line 243, in _parse_response

duoauthproxy.lib.duo_async.■■■■■■■■■■■■■■■■■■■■r: 40102: Invalid integration key in request credentials

2020-02-05T11:12:05+0800 [HTTPPageGetter (TLSMemoryBIOProtocol),client] ((‘10.66.182.101’, 32435), qingzhan, 69): Failmode Secure - Denied Duo login on preauth failure
2020-02-05T11:12:05+0800 [HTTPPageGetter (TLSMemoryBIOProtocol),client] ((‘10.66.182.101’, 32435), qingzhan, 69): Returning response code 3: AccessReject
2020-02-05T11:12:05+0800 [HTTPPageGetter (TLSMemoryBIOProtocol),client] ((‘10.66.182.101’, 32435), qingzhan, 69): Sending response
2020-02-05T11:12:05+0800 [duoauthproxy.lib.http._■■■■■■■■■■■■■■■■■■■■#info] Stopping factory <_■■■■■■■■■■■■■■■■■■■■: https://■■■■■■■■■■■■■■■■■■■■■■■■■■■■:443/rest/v1/preauth>

[ad_client]
host=
service_account_username=
service_account_password=
search_dn=

[radius_client]
host=10.66.182.101
secret=cisco
nas_ip=10.79.247.60
retry_wait=5

; SERVERS: Include one or more of the following configuration sections.
; To configure more than one server configuration of the same type, append a
; number to the section name (e.g. radius_server_auto1, radius_server_auto2)

[radius_server_auto]
ikey=■■■■■■■■■■■■■■■■■■■■
■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■
api_host=■■■■■■■■■■■■■■■■■■■■■■■■■■■■
radius_ip_1=10.66.182.101
radius_secret_1=cisco
failmode=safe
client=radius_client
port=1812

1 Reply 1

DuoKristina
Cisco Employee
Cisco Employee

PLEASE don’t try posting sensitive information like your integration/secret keys here in this public forum!

If you’re positive that you have the right integration information in the config file, contact Duo support. The troubleshooting steps to resolve this can’t be done in a public forum (and this is not the right place for 1:1 support assistance anyway).

Duo, not DUO.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links