MultiFactor authentication: 2fa mfa duo?

Feedback Product Ideas
1

Hi. We require multi-factor authentication for checkMK but have come up short with google-fu… Has anyone implemented this? Seems quite achievable but wanted to check before spending time re-creating a wheel that I assume already exists…

2

I worked it out (AD + push) a while ago without basic LDAP in case you still need it. This is from my notes: -

[ad_client]
host=192.168.8.11
service_account_username=svcCMKLDAP
service_account_password=Password
search_dn=DC=xyz-ltd, DC=co,DC=uk

[ldap_server_auto]
client=ad_client
ikey=XXXXXXXXXXXXXXX
skey=XXXXXXX
api_host=api-XXXXx.duosecurity.com
failmode=safe
exempt_ou_1=CN=svcCMKLDAP, OU=ServiceAccounts, OU=GB, DC=xyz-ltd, DC=co,DC=uk

2 Likes
3

thanks for taking the time to get back to me on this. I’ll come back to this in a week or so and update this thread if I have any value to add.