Issue turned out to be internal - AD administrator removed all staff from the IT department from the Duo access group. :)
On Wed, May 15, 2019 at 10:23 AM J Truts <[email protected]> wrote: > Thanks - per Duo Status everything seems up: https://status.duo.com/ > > but it seems to be an error on their end since we haven't changed anything > on our side. Even with Debug logging on though I'm not seeing much of > anything that would indicate an error with Duo other than the original log > I posted (which I still haven't seen again). > > Josh > > > On Wednesday, May 15, 2019 at 10:18:26 AM UTC-5, David Curry wrote: >> >> It's working fine for us (CAS 5.2.x). >> >> That error looks familiar though... I won't swear it's the same one, but >> there was an outage a couple of months ago too, and that was a problem on >> the Duo side. >> >> --Dave >> >> -- >> >> DAVID A. CURRY, CISSP >> *DIRECTOR OF INFORMATION SECURITY* >> THE NEW SCHOOL • INFORMATION TECHNOLOGY >> >> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 >> +1 212 229-5300 x4728 • [email protected] >> >> >> On Wed, May 15, 2019 at 10:51 AM J Truts <[email protected]> wrote: >> >>> Forgot to mention CAS version is 5.3.6. >>> >>> On Wednesday, May 15, 2019 at 9:50:03 AM UTC-5, J Truts wrote: >>>> >>>> Without having made any changes to our CAS application servers or >>>> services today Duo MFA challenge is no longer being presented after logging >>>> into CAS. >>>> >>>> We opened a call with Duo as well but haven't heard anything. >>>> >>>> I did notice this error in the logs: >>>> >>>> 2019-05-15 07:45:04,820 WARN >>>> [org.apereo.cas.adaptors.duo.authn.BaseDuoSecurityAuthenticationService] - >>>> <Duo returned an Invalid request response with message [Access forbidden] >>>> and detail [Wrong integration type for this API.] when determining user >>>> account. This maybe a configuration error in the admin request and Duo >>>> will still be considered available> >>>> >>>> We have one Duo API setup with the "CAS" Integration Type and another >>>> with "WebSDK" - neither seems to be working though. Since restarting the >>>> cas service though I haven't seen this error thrown again, but still no Duo >>>> challenge. >>>> >>>> Curious if anyone else is noticing issues with Duo? >>>> >>>> Thanks, >>>> >>>> Josh >>>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/deaad936-ade5-44f8-9d67-e3ee3932423f%40apereo.org >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/deaad936-ade5-44f8-9d67-e3ee3932423f%40apereo.org?utm_medium=email&utm_source=footer> >>> . >>> >> -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/3db18fd3-64bf-42a1-9ae4-68e6310a6ce3%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/3db18fd3-64bf-42a1-9ae4-68e6310a6ce3%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABOP7TQ84_nJ60cM77b%3D705F%2B-3A1hLKG5LYSO8NNAPOt9ZKXQ%40mail.gmail.com.
