Duo Integration with Kali Linux 2020 v2
WARNING : This video shows you how to configure DUO for SSH login. It will break your GUI if you do not enroll the DUO from the GUI or know where to make the additional changes.
Create an additional user account and test the SSH login with the created account as shown in the demo.
Reboot the server and login with the default kali account and you will be prompted to enrol the DUO MFA at the GUI login screen. Enrol DUO at the GUI login prompt and the MFA will work on the GUI after the enrollment. Then login from SSH and the DUO MFA will work on the SSH session as well. If you are using SSH public key, you will need to create the /.ssh folder in user kali and add the public key of the client to the authorized_keys and it will then work for both GUI, sudo and SSH.
There are other area to change and integrate if you want to make use of DUO MFA for more advanced stuffs. Have fun trying out in your lab.
If I have time next weekend I will create a video on integrating and enrolling through the GUI.
It can be fun or abit intrusive to have to authenticate with push notification for the sudo commands. But you can work on tweaking the duration that you need push notification. Try it out and learn how to demo this properly.
If you like the free background music I am playing check out
Music: https://www.bensound.com/