cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1845
Views
0
Helpful
2
Replies

DUO authentication proxy problem

Zach_Sec
Level 1
Level 1

Hi all,

i am new to DUO, and i got stuck at a situation.
I am trying to see why the DUO authentication proxy doesn’t connect to my MS AD.
I am getting this error:

> Unable to format event {'search_dn': 'DC=lab\xe2\x88\x92kozina,DC=com', 'log_namespace': 'duoauthproxy.lib.log', 'log_level': <LogLevel=error>, 'log_logger': <Logger 'duoauthproxy.lib.log'>, 'log_time': 1582104044.569571, 'log_source': None, 'log_format': 'The Auth Proxy got an error searching the LDAP DN {search_dn}.'}: 'ascii' codec can't decode byte 0xe2 in position 6: ordinal not in range(128)

The domain is: lab-kozina.com

According to this topic, [https://help.duo.com/s/article/3410?language=en_US]
seems like DUO doesn’t like the ‘-’ in the domain name, which is a big issue. I am correct? Do we have any workarounds except renaming the whole domain?

BR,
Zach

2 Replies 2

DuoKristina
Cisco Employee
Cisco Employee

I couldn’t reproduce this by specifying a base DN containing a hyphen, but in an OU name (as our test domains are already named without hyphens) e.g. OU=test-this,DC=acme,DC=local .

Can you please contact Duo support to open a case?

Duo, not DUO.

Thank you for your tip, i have sent an email to them.

BR,
Zach

Quick Links