cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2396
Views
0
Helpful
3
Replies

VCENTER 6.5 will not prompt MFA DUO

quepons-a
Level 1
Level 1

There are already some great post on how to get VCENTER 6.5 working with a DUO LDAP proxy, but for the life of me I can never get Vcenter to prompt for MFA PUSH. I have audited my DUO Proxy settings. I am able to configure the Auth with LDAP in vcenter when pointing to the DUo Auth proxy and it finds AD users. Any advice is welcome. Thank you.

1 Accepted Solution

Accepted Solutions

quepons-a
Level 1
Level 1

thank you for the responses. I was able to fix the issue by running the connectivity.exe
Thank you guys again.

View solution in original post

3 Replies 3

Amy2
Level 5
Level 5

Hi @quepons-a,

If you enter a username and password, do you receive an automatic push? I suspect what’s happening is that you are using the [ldap_server_auto] configuration, which defaults to an automatic push or phone callback during LDAP authentication. Alternatively you can add a comma (",") to the end of your password, followed by a Duo passcode. You won’t see the interactive, browser-based Duo Prompt, however, and there is no way to show it in this configuration. So you won’t be prompted for 2FA, but you should still receive an authentication request.

Please let me know if that answers your question or you still need help!

Btw, that answer came from @DuoKristina in this thread for reference

If @Amy’s good suggestions don’t help, I suggest you enable debug logging and see what’s happening during authentication. Some applications perform the LDAP authentication by binding as the service account then as the authenticating user in the same connection, while others may bind as the service account, disconnect, then bind as the authenticating user in a new connection. You can see an example of this in section 22 in this guide to understanding the debug output.

Duo, not DUO.

quepons-a
Level 1
Level 1

thank you for the responses. I was able to fix the issue by running the connectivity.exe
Thank you guys again.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links