Thank you for the information. From what I can tell, Duo uses secure LDAP. I'll check the docs and see what I can dredge up sometime soon. On Thu, Dec 8, 2016 at 6:02 AM, Nikos Mavrogiannopoulos <n.mavrogiannopoulos at gmail.com> wrote: > On Tue, Dec 6, 2016 at 1:37 PM, Chris Libby <chris.a.libby at gmail.com> wrote: >> Disclaimer: I'm a openconnect nub and probably posting to the wrong >> list, so I will apologize up front if that's the case. I did some >> googling for the answers below but wasn't able to find the answers >> that I have been looking for. >> Two relatively quick questions: >> - Is there an easy way to force ocserv to prompt for the username and >> password at the same time? > > No. It is designed around pam which asks one question at a time. > >> - Is there a way to integrate DUO 2FA? > > I wouldn't know. It depends what interfaces the duo provides. There > were some discussions previously on this list. I think if you have a > functional pam module, it would work. > > regards, > Nikos
