Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power

 View Only
  • 1.  Recent duo_unix binary for AIX?

    Posted 26 days ago

    The current Linux Toolkit binary for duo_unix is very, very old. Can build it from source, but would prefer a tested binary. Is anyone doing this?



    ------------------------------
    Gary Bennett
    ------------------------------


  • 2.  RE: Recent duo_unix binary for AIX?

    Posted 26 days ago

    Hi Gary,

    We are working to update it to the latest version.

    Most probably it would be uploaded in 2-3 weeks.



    ------------------------------
    SANGAMESH
    ------------------------------



  • 3.  RE: Recent duo_unix binary for AIX?

    Posted 25 days ago
    Edited by Ken Lawson 25 days ago

    The most recent versions (2.1.0 thru 2.2.3) have issues when compiling from source. I am actively working with DUO support on it, but they do not want to seem to address the issue. 



    ------------------------------
    Ken Lawson
    ------------------------------





  • 4.  RE: Recent duo_unix binary for AIX?

    Posted 22 days ago
    Edited by Ken Lawson 21 days ago

    I also wanted to make note @SANGAMESH MALLAYYA that the certs for the version currently in available expire Feb 2nd.

    How can I make sure I am up to date with Duo's latest applications in time for the Duo root certificate authority bundle replacement?



    ------------------------------
    Ken Lawson
    ------------------------------



  • 5.  RE: Recent duo_unix binary for AIX?

    Posted 14 days ago

    I wanted to post an update that I received an update from DUO support. They have approved a method that compiles the 2.2.3 duo_unix client on AIX. The issue before is that you will get an error when trying to make the client:

    ...

    libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../compat -I../lib -g -O2 -Wall -D_FORTIFY_SOURCE=2 -O0 -Wl,-lm -isystem /usr/include -g0 -MT pam_duo.lo -MD -MP -MF .deps/pam_duo.Tpo -c pam_duo.c  -fPIC -DPIC -o .libs/pam_duo.o
    In file included from pam_duo.c:12:
    ../config.h:240:22: warning: 'struct tm' declared inside parameter list will not be visible outside of this definition or declaration
      240 | time_t timegm(struct tm *tm);
          |                      ^~
    In file included from pam_extra.h:9,
                     from pam_duo.c:64:
    ../config.h:240:8: error: conflicting types for 'timegm'; have 'time_t(struct tm *)' {aka 'int(struct tm *)'}
      240 | time_t timegm(struct tm *tm);
          |        ^~~~~~
    ../config.h:240:8: note: previous declaration of 'timegm' with type 'time_t(struct tm *)' {aka 'int(struct tm *)'}
      240 | time_t timegm(struct tm *tm);
          |        ^~~~~~
    make[2]: *** [Makefile:500: pam_duo.lo] Error 1
    make[2]: Leaving directory '/tmp/duo/duo_unix-2.2.3/pam_duo'
    make[1]: *** [Makefile:523: all-recursive] Error 1
    make[1]: Leaving directory '/tmp/duo/duo_unix-2.2.3'
    make: *** [Makefile:413: all] Error 2


    The process to successful compile and I have confirmed with DUO Support to be approved is to run as follows:


    ./configure --with-pam --prefix=/usr
    #This will generate the make files
    #Edit the config.h file and comment out the following lines as follows:

    /*
    #ifndef HAVE_TIMEGM
    time_t timegm(struct tm *tm);
    #endif
    */

    #Save the file and now run the remaining commands
    make
    make install

    This should complete the installation and if a prior version was installed little if any work should need to be done at this point. YMMV, but I wanted to post this in case someone was looking for a solution.



    ------------------------------
    Ken Lawson
    ------------------------------



  • 6.  RE: Recent duo_unix binary for AIX?

    Posted 14 days ago

    That's awesome is it ready to download and install?

     

    Jeff Frank

    Unix/Linux System Administrator

    Information Technology
    JPS Health Network  |  1400 S. Main Street  |  Fort Worth, Texas 76104
    Direct 817-702-6734  Cell 817-500-4253 |  www.jpshealthnetwork.org

     


    Information in this transmission and the documents which may accompany it are likely to contain medically privileged, attorney/client privileged, Medical Committee/Medical Peer Review privileged and additional confidential information. Such information is intended only for use of the individual or entity to which it is addressed above. If the recipient of this message is not the intended recipient or is the agent responsible for delivering the information contained within, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately make notification to my attention.






  • 7.  RE: Recent duo_unix binary for AIX?

    Posted 14 days ago

    To be clear, the source code is available, yes from DUO. But you will have to download, compile and install it on your own while ensuring that you have all the required filesets to compile. The steps noted should help with the issue I was seeing when trying to compile in our environment. I cannot speak to the IBM team on them making a prebuilt fileset in the "AIX Toolbox for Open Source Software" that I recall dnf using.



    ------------------------------
    Ken Lawson
    ------------------------------



  • 8.  RE: Recent duo_unix binary for AIX?

    Posted 20 days ago

    Any chance AIX will be ready?  If not what is an option moving forward?   



    ------------------------------
    Jeff Frank
    ------------------------------



  • 9.  RE: Recent duo_unix binary for AIX?

    Posted 13 days ago

    Latest duo version would be uploaded mostly in a week to AIX Toolbox.



    ------------------------------
    SANGAMESH
    ------------------------------