Anyone having issues with Duo today? (5/15/2019)

[J Truts]

Without having made any changes to our CAS application servers or services today Duo MFA challenge is no longer being presented after logging into CAS.

We opened a call with Duo as well but haven't heard anything.

I did notice this error in the logs:

2019-05-15 07:45:04,820 WARN [org.apereo.cas.adaptors.duo.authn.BaseDuoSecurityAuthenticationService] - <Duo returned an Invalid request response with message [Access forbidden] and detail [Wrong integration type for this API.] when determining user account.  This maybe a configuration error in the admin request and Duo will still be considered available>

We have one Duo API setup with the "CAS" Integration Type and another with "WebSDK" - neither seems to be working though.  Since restarting the cas service though I haven't seen this error thrown again, but still no Duo challenge.

Curious if anyone else is noticing issues with Duo?

Thanks,

Josh

[J Truts]

Forgot to mention CAS version is 5.3.6.

[David Curry]

It's working fine for us (CAS 5.2.x).

That error looks familiar though... I won't swear it's the same one, but there was an outage a couple of months ago too, and that was a problem on the Duo side.

--Dave

--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
THE NEW SCHOOL • INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/deaad936-ade5-44f8-9d67-e3ee3932423f%40apereo.org.

[J Truts]

Thanks - per Duo Status everything seems up: https://status.duo.com/

but it seems to be an error on their end since we haven't changed anything on our side.  Even with Debug logging on though I'm not seeing much of anything that would indicate an error with Duo other than the original log I posted (which I still haven't seen again).

Josh

To unsubscribe from this group and stop receiving emails from it, send an email to cas-...@apereo.org.

[J Truts]

Issue turned out to be internal - AD administrator removed all staff from the IT department from the Duo access group.  :)

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3db18fd3-64bf-42a1-9ae4-68e6310a6ce3%40apereo.org.