No Longer Able to Retrieve API Token at /api/tokens after enabling DUO MFA

[CVAD IT Service Desk <cv...@unt.edu>]

Good morning all.

After enabling DUO MFA on our Guacamole instance we are no longer able to retrieve an auth token from /api/tokens.

We are presented with an error saying that “Verification using Duo is required before authentication can continue.”.

I cannot find any information or documentation on how to authenticate with guacamole via DUO MFA via the api only.

Here is the full error (sending a Pastebin link): https://pastebin.com/3hRxXXhu

Even with the local guacadmin user, we are having to enable DUO MFA. Alternatively, is there a way to “whitelist” specific users so that they don’t have to go through the DUO MFA process?

Thanks!

Austin Leath CVAD IT Service Desk
[Text  Description automatically generated]
ART 371 | 1201 West Mulberry Street, Denton, TX 76201
cvad.itservices@unt.edu<ma...@unt.edu> | 940.565.4522 | itservices.cvad.unt.edu<https://itservices.cvad.unt.edu/>