rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: beeswax on April 15, 2019, 01:21:56 PM

Title: Any way to integrate 2FA service (Duo Security)?
Post by: beeswax on April 15, 2019, 01:21:56 PM
Hello everyone,  I'm a long-time user and lurker but never posted here before, greetings  :)

I'm running HFS on a Windows server and at the moment, I shut it down when not in use because of all the attempts from hackers to either exploit or brute-force the server.  I recently discovered Duo Security for protecting my server from unwanted RDP logon attempts and by adding this, I can block access completely from all foreign countries, restrict logons to only use a specfic username and once correct credentials are entered, a 2FA prompt on my phone must be approved.  It's made me a lot more confident leaving RDP enabled all the time on my server.

Now, what I'm getting to, I noticed Duo also have a Web API which would be amazing if it were integrated into HFS, is this possible at all?

This is Duo Security: www [dot] duo [dot] com (sorry, I'm not allowed to post links!)

and here is the documentation for integrating it into webapps: [https] ://duo.com [slash] docs [slash] duoweb

Not being a coder, almost all of that is over my head but I'm hoping some clever person here understands it.  Thanks!
Title: Re: Any way to integrate 2FA service (Duo Security)?
Post by: bmartino1 on April 16, 2019, 12:31:21 AM
?
https://duo.com/
https://duo.com/docs/duoweb

is it posible to html code in hfs yes, i'm not familura with duo nor its web api.

from what i see:

First Steps
Before starting:

Sign up for a Duo account.
Log in to the Duo Admin Panel and navigate to Applications.
Click Protect an Application and locate Web SDK in the applications list. Click Protect this Application to get your integration key, secret key, and API hostname. (See Getting Started for help.)
Download and install a supported client library (Python, Ruby, Classic ASP, ASP.NET, Java, PHP, Node.js, ColdFusion, Perl).
Use NTP to ensure that your server's time is correct.

you need to download and setup a client libary. (id recomend java)
and use the iframe souce form the document

--------------
The problem, HFS at the moment doen't support php, not is ther a predeveloped webcode form there site for hfs to intergrate. you wil lahve to manualy code or contact them for html coding support to intergrate it into hfs.

Contact Support
support@duo.com
Call Sales
1.866.760.4247
Email Sales
Contact Sales
Title: Re: Any way to integrate 2FA service (Duo Security)?
Post by: The Engineer on July 13, 2019, 11:02:07 PM
I just use Google RDT for remote access to my Win10 server. It normally sleeps so I use MagicPacket from the Microsoft store to Wake up on Wan, then access with https://remotedesktop.google.com/. Easy Peasy