search

bawood / TA-DUOSecurity2FA

Splunk TA for indexing DUO 2 factor activity logs
2 stars 4 forks source link

Proxy support #2

Open inspired opened 8 years ago

inspired commented 8 years ago

It would be great if the app had proxy support configurable via the Input Setup page.

As of now I've had to hard code the proxy settings in duo.py for the Python requests lib as well as hard code it for duo_client.Admin

inspired commented 7 years ago

Same for custom CA certs (some do SSL inspection)

omegaleon commented 7 years ago

@inspired Can you share those changes with me. random[@]itforesight.net

inspired commented 7 years ago

@omegaleon I believe I just added this near the top of the file. Sorry, I don't have access to the file as it is in a customer environment

os.environ["HTTP_PROXY"] = "proxy.ip:8080"
os.environ["HTTPS_PROXY"] = "proxy.ip:443"
rhys-intelliflo commented 7 years ago

Hi guys, I'm struggling to get the proxy working and my python knowledge is not very good. Where did you configure the os.environ proxy in the duo.py? Cheers,

inspired commented 7 years ago

Right beneath the imports near the top of the duo.py file :-)

  1. jan. 2017 18:31 skrev "rhys-intelliflo" notifications@github.com:

Hi guys, I'm struggling to get the proxy working and my python knowledge is not very good. Where did you configure the os.environ proxy? Cheers,

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/bawood/TA-DUOSecurity2FA/issues/2#issuecomment-271349253, or mute the thread https://github.com/notifications/unsubscribe-auth/AADLJNGBI3eGuJrw-XSefdGmH7xOe2bPks5rQm79gaJpZM4KoPdo .

rhys-intelliflo commented 7 years ago

No joy :(. Do I need to restart splunk for it to apply?

inspired commented 7 years ago

You may need to delete the .pyc (sic) file and restart Splunk.

  1. jan. 2017 19:32 skrev "rhys-intelliflo" notifications@github.com:

No joy :(. Do I need to restart splunk for it to apply?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/bawood/TA-DUOSecurity2FA/issues/2#issuecomment-271365180, or mute the thread https://github.com/notifications/unsubscribe-auth/AADLJPJTa3BVomvENmbRR2_-HUGFRgAaks5rQn05gaJpZM4KoPdo .

rhys-intelliflo commented 7 years ago

I can't see a duo.pyc in the app folder. Where would that be? if it is duo.pyc?

inspired commented 7 years ago

bin/duo.pyc alongside bin/duo.py.

It's a compiled version of the Python file. If you can't find it restart Splunk and see if that works for you.

I don't have more info unfortunately. I was never able to get this working successfully because my client also needed SSL decryption and we weren't able to get that to work.

  1. jan. 2017 19:41 skrev "rhys-intelliflo" notifications@github.com:

I can't see a duo.pyc in the app folder. Where would that be? if it is duo.pyc?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/bawood/TA-DUOSecurity2FA/issues/2#issuecomment-271367589, or mute the thread https://github.com/notifications/unsubscribe-auth/AADLJEirNWKHLb-R1vTw4mhmP1bv4gzVks5rQn9MgaJpZM4KoPdo .