Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Cannot authenticate through Duo after upgrade

EDR: Cannot authenticate through Duo after upgrade

Environment

  • EDR Server: All Versions
  • Duo Authentication

Symptoms

  • Cannot authenticate to Duo after upgrading server
  • /var/log/cb/coreservices/debug.log shows errors for missing fields
<err> cb.flask.blueprint_helpers - Unhandled exception from API request: 'uid'
Traceback (most recent call last):
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/flask/app.py", line 1950, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/flask/app.py", line 1936, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/usr/share/cb/virtualenv/lib/python3.9/site-packages/cb/flask/blueprints/auth_api_blueprint.py", line 137, in auth
  File "/usr/share/cb/virtualenv/lib/python3.9/site-packages/cb/flask/blueprints/auth_api_blueprint.py", line 50, in _check_2fa
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/werkzeug/datastructures.py", line 269, in pop
    rv = super(UpdateDictMixin, self).pop(key)
KeyError: 'uid'

 

Cause

/usr/share/cb/plugins/duo/secrets.ini was overwritten during upgrade

Resolution

  • This issue is expected to be resolved in server version 7.7.1 - CB-27628
  • Workaround
    1. Manually update /usr/share/cb/plugins/duo/secrets.ini with previous settings.
    2. Restart services 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-29-2021
Views:
171
Contributors