About Dinglot

Dinglot · 12-13-2021

We have Duo Authentication Proxy setup on our DC to provide 2FA to users for our VPN logins. We had been using the Domain Admin as the ‘service_account_username’ in the [ad_client] section. Of course, we want to get away from that. Since gMSA accou...

Dinglot · 12-15-2021

Thank you!! The article you pointed me to fixed the issue. It was a read-privilege error. Now it works perfectly. Thank you so much!

Dinglot · 12-14-2021

I looked more closely at our AD OUs. I guess they are all Security Groups, whether they are in the Security Group OU or in the Users OU. I’ll look more into the delegation restrictions in the domain.

Dinglot · 12-14-2021

Thank you so much for the guidance. I verified that the regular domain user I created is able to read other Domain Users from the domain. But the list I’m verifying from is in a Security Group. I gave the user Read permissions on that security gro...

Member Since	‎12-13-2021 01:48 PM
Date Last Visited	‎07-15-2023 02:14 AM
Posts	4
Total Helpful Votes Received	1

User Statistics

User Activity

Duo AuthProxy.cnf - what permissions are needed for ad_client ServiceAccountUsername?

Re: Duo AuthProxy.cnf - what permissions are needed for ad_client ServiceAccountUsername?

Re: Duo AuthProxy.cnf - what permissions are needed for ad_client ServiceAccountUsername?

Re: Duo AuthProxy.cnf - what permissions are needed for ad_client ServiceAccountUsername?