duo_authproxy

Table of Contents

1. Description
2. Setup - The basics of getting started with duo_authproxy
   • What duo_authproxy affects
   • Beginning with duo_authproxy
3. Usage - Configuration options and additional functionality
4. Reference - An under-the-hood peek at what the module is doing and how
5. Limitations - OS compatibility, etc.
6. Development - Guide for contributing to the module

Description

Puppet Module to install/configure Duo Authentication Proxy

Setup

What duo_authproxy affects

• source code download/install
• config file
• service

Beginning with duo_authproxy

Minimal duo_authproxy setup:

class { 'duo_authproxy':
  settings => {
    # All required config sections and settings
    'main' => {
      'setting1' => 'value1',
    },
  },
}

Usage

Configure with hiera yaml

include duo_authproxy

---
duo_authproxy::version: 6.5.2
duo_authproxy::install_dir: /opt/duoauthproxy

duo_authproxy::settings:
  main:
    debug: true
    http_proxy_host: my.proxy.com
    http_proxy_port: 80
  ad_client:
    host: some.host.com
    service_account_username: testing
    service_account_password: secret
    search_dn: something
  ldap_server_auto:
    ikey: ikey
    skey: skey
    api_host: api_host
duo_authproxy::proxy_server: http://my.proxy.com:80

Reference

Classes

• duo_authproxy

Parameters

dep_packages

Array list of packages to install prior to build

version

Version of duoauthproxy to install (default: 6.5.2)

python_env

Executable for python

build_dir

Absolute path to source directory

extract_dir

Absolute path for extracted source files

install_dir

Absolute path for installed binaries

install_src

Site from which to download source code (default: dl.duosecurity.com)

install_proto

Protocol to use for download (default: https)

proxy_server

Address of proxy server (if needed)

proxy_type

Type of proxy (none|http|https|ftp) (defaults to none if proxy_server is undef, otherwise defaults to $duo_authproxy::install_proto)

settings

Hash of values for main config

checksum

REQUIRED: sha-256 checksum of downloaded tgz file

service_user

Service will run as specific user (default: duo_authproxy_svc)

log_group

Syslog group for logging (default: duo_authproxy_grp)

init_script

Whether to install systemd scripts (default: true)

selinux

Whether to install the Authentication Proxy SELinux module (default: true)

Limitations

Only tested on Supported puppet versions; RedHat and Debian flavors

Development

• Pull Requests welcome
• Include spec tests
• All tests need to pass