For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eran's avatar
eran
Icon for Altostratus rankAltostratus
Mar 02, 2023

RADIUS AUTH (DUO) from VMware view client

Hi, i have a vdi setup from my apm and it work fine from regular web logon page. my issue is when i try to set up an additional login method from the vmware view client itself. i get the first ste...
application delivery
Matt_Mabis's avatar
Matt_Mabis
Icon for Employee rankEmployee
Mar 08, 2023

Hey eran 

I think i might be able to reach out to someone in the backend engineering on this one, but wanted to clarify a couple of questions

1) you mention that the webtop version works correctly, i would assume you also followed the doc you listed that modified the Webtop configuration to allow it to work?  (adding duo script to the header.inc and the logon.inc however nothing was added to the view.inc file).

2) I assume the Macro is the same macro used in the browser and horizon client but the horizon client fails. 

I have a feeling i know whats going on, but just those bits of clarity will help me ask the backend engineers.. 

eran's avatar
eran
Icon for Altostratus rankAltostratus
Jun 03, 2024

Hey matt

sorry for the (very..) late reply.

We are in the process of changing the 2FA to OAuth with Duo. Everything works fine through Webtop.

However, when we tried to see how it works directly through the VMware Horizon client, we are "stuck" at the connecting stage and are not being redirected or prompted for a Duo challenge.

My only question is: Is it even possible to prompt a Duo challenge when connecting directly?

I have followed this article https://community.f5.com/kb/technicalarticles/apm-configuration-to-support-duo-mfa-using-irule/283971