AC87U / Duo Security / OpenVPN / 2 Factor Authentication

[jochenthomas]

Hi there,
is there a possibility to integrate Duo Security into the AC87U (or maybe any other newer Asus router)?

https://duo.com/docs/openvpn​

I need to secure the integrated OpenVPN server with Two Factor Authentication.

Any live experience already (would be great if someone already did it)?
Any advises or comments?
Maybe there are limitations which prohibits to integrate such 2party solutions.

Thanks in advance.

 

[jochenthomas]

ping... any suggestions?

 

[lancethepants]

Here's my experience with it. Starting with that comment forward.
http://www.linksysinfo.org/index.php?threads/two-factor-authentication-in-openvpn.69109/#post-243397

Was a while ago, but I got it working compiling it with Tomatoware. I had to change a couple paths in the source to tell it the full path of python I think. I then used it in tomato by adding some stuff to the custom configuration.

 

[jochenthomas]

Here's my experience with it. Starting with that comment forward.
http://www.linksysinfo.org/index.php?threads/two-factor-authentication-in-openvpn.69109/#post-243397

Was a while ago, but I got it working compiling it with Tomatoware. I had to change a couple paths in the source to tell it the full path of python I think. I then used it in tomato by adding some stuff to the custom configuration.

Hi lancethepants,
sounds interesting, but I am not a deep diving Linux exptert - so seems unfortunetaly too much for me to achieve ;-)

However, I will keep it in mind that it could be possible!
Thanks.

 

[ilium007]

Hi - would love to get some help with this. Have spent hours here tonight

I have tomatoware installed and have downloaded the duo security source.

I have compiled it on both the 1.3 version of arm-soft-mmc.tgz as well as the latest nightly. When I run the compiled baniary on the cmd line I get 'Segmentation fault' and when I try and start openvpn (stock tomato shibby version) I get 'PLUGIN_INIT: could not load plugin shared object /mmc/usr/duo/duo_openvpn.so: File not found' but you can see fro the dir listing it is definitely there !

Any help would be appreciated.

root@rtac68u:/mmc/usr/duo# tail -f /mnt/EXTUSB/openvpn/server1/openvpn.log
Mon Jun 13 23:24:02 2016 us=759337 PLUGIN_INIT: could not load plugin shared object /mmc/usr/duo/duo_openvpn.so: File not found
Mon Jun 13 23:24:02 2016 us=759676 Exiting due to fatal error
tail: /mnt/EXTUSB/openvpn/server1/openvpn.log: file truncated
Mon Jun 13 23:25:01 2016 us=27881 PLUGIN_INIT: could not load plugin shared object /mmc/usr/duo/duo_openvpn.so: File not found
Mon Jun 13 23:25:01 2016 us=28225 Exiting due to fatal error
^C


root@rtac68u:/mmc/usr/duo# ll /mmc/usr/duo/
total 44
-rw-r--r-- 1 root root 7129 Jun 13 23:23 ca_certs.pem
-rwxr-xr-x 1 root root 12729 Jun 13 23:24 duo_openvpn.py*
-rwxr-xr-x 1 root root 8324 Jun 13 23:23 duo_openvpn.so*
-rwxr-xr-x 1 root root 5261 Jun 13 23:23 https_wrapper.py*


root@rtac68u:/mmc/usr/duo# ./duo_openvpn.so
Segmentation fault
root@rtac68u:/mmc/usr/duo#

I have also updated the python #! in the .py script. And I also modified duo_openvpn.c to include the missing (it wouldn't compile due to being unable to call waitpid() ):

#include <sys/wait.h>