57 lines
2.2 KiB
Cheetah
57 lines
2.2 KiB
Cheetah
#
|
|
# duo_api.tmpl - config template for duo_api.py, a pure python3 DUO API client
|
|
#
|
|
# Version 1.0, latest version, documentation and bugtracker available at:
|
|
# https://gitlab.lindenaar.net/scripts/duo
|
|
#
|
|
# Copyright (c) 2019 Frederik Lindenaar
|
|
#
|
|
# This file is free software: you can redistribute and/or modify it under the
|
|
# terms of version 3 of the GNU General Public License as published by the Free
|
|
# Software Foundation, or (at your option) any later version of the license.
|
|
#
|
|
# This script is distributed in the hope that it will be useful but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
|
# A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License along with
|
|
# this program. If not, visit <http://www.gnu.org/licenses/> to download it.
|
|
#
|
|
|
|
# To use this file with duo_api.py, rename it to duo_api.conf and update it for
|
|
# your DUO environment. For documentation, please run: pydoc duo_api
|
|
|
|
# The API section should reflect the DUO '3rd party API' Application to be used
|
|
[API]
|
|
host=api-XXXXXXXX.duosecurity.com
|
|
ikey=XXXXXXXXXXXXXXXXXXXX
|
|
skey=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
|
path=/auth/v2/
|
|
|
|
# The remainder of this file defines each DUO API request to be issued in a
|
|
# separate section. Multiple sections can be configured for the same request by
|
|
# appending a suffix starting with an underscore ('_').
|
|
# See https://duo.com/docs/authapi and https://duo.com/docs/adminapi for the
|
|
# available endpoints, parameters and responses.
|
|
|
|
# Example for a fixed-value 'auth' request for DUO authorization
|
|
[auth]
|
|
username=username
|
|
factor=push
|
|
device=auto
|
|
type=Network Access
|
|
display_username=Test User
|
|
# pushinfo must be URL encoded, see also https://duo.com/docs/authapi#/auth
|
|
pushinfo=explanation=Text+section(s)+shown+to+the+user&mode=TEST
|
|
|
|
# Example for a dynamic 'auth' request for DUO authorization, %(..)s instances
|
|
# are replaced by the code for values passed at runtime, this allows configuring
|
|
# the request in the config and only passing the dynamic values at runtime
|
|
[auth_dynamic]
|
|
username=%(login)s
|
|
factor=push
|
|
device=auto
|
|
type=%(banner)s
|
|
display_username=%(name)s
|
|
|