search

itiligent / Guacamole-Installer

Automated install of Gucamole with options for HTTPS reverse proxy, Active Directory integration, MFA, LetsEncrypt, dark theme, MySQL backup, email alerts & more.
GNU Affero General Public License v3.0
240 stars 44 forks source link

Cisco Duo Web SDK v2 is outdated #50

Closed Ondjultomte closed 4 weeks ago

Ondjultomte commented 4 weeks ago

When installing with this script the Web SDK v2 seems to be used. its depricated now. Web SDK v4 needs to be used

We are stuck with this message when deploying the script and setting up Duo.

image

itiligent commented 4 weeks ago

This this looks like DUO giving themselves (and their users) an uppercut by changing the front end prompt functionality but not considering things outside of their own preferred use case bytaking away from users any control to keep the legacy prompt after April this year - because nobody is ever going to need legacy software right? :-(

You've got two options:

  1. see https://duo.com/docs/universal-prompt-update-guide - This link suggests talking to Duo suppot for apps that have not yet been updated which means there might be a manual override for the date limitation on the Web SDK config, but they want to force poeple down a certain track wherever they ca n first maybe??

  2. Or wait for Guacmole 1.6 as this issue is in the pipline. see here: https://issues.apache.org/jira/browse/GUACAMOLE-1289?jql=text%20~%20%22duo%22 The notes on the issue suggest that code has alredy been added to fix this, so if you have the skills you could build guac from the latest snaphot verion to test.

Not much I can do I'm afraid, but do please share any progress you make here to help others as this is a more serious issue than many.

itiligent commented 4 weeks ago

closing as this is a Guac + Duo issue that is slated to be fixed in 1.6, but please feel free to add details of any workarounds you find or your progress with Duo support here

Ondjultomte commented 4 weeks ago

Hi, thanks for the links.

yes I know, maybe a disclamer text or something ? but 1.6 might be just around the corner .