API tools faq
paste
Advertisement
Guest User

Duo Rd Gateway registry setttings

a guest
Dec 5th, 2019
82
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.55 KB | None | 0 0
raw download clone embed print report
  1. Registry keys queried by Duo RDGW version: https://duo.com/docs/rdgateway
  2. HKLM\SOFTWARE\Duo Security\DuoTsg\Host SUCCESS Type: REG_SZ
  3. HKLM\SOFTWARE\Duo Security\DuoTsg\IKey SUCCESS Type: REG_SZ, Length: 42, Data:
  4. HKLM\SOFTWARE\Duo Security\DuoTsg\SKey SUCCESS Type: REG_SZ, Length: 82, Data:
  5. HKLM\SOFTWARE\Duo Security\DuoTsg\AKey NAME NOT FOUND Length: 144
  6. HKLM\SOFTWARE\Duo Security\DuoTsg\ApiRetryCount NAME NOT FOUND Length: 144
  7. HKLM\SOFTWARE\Duo Security\DuoTsg\FailOpen SUCCESS Type: REG_DWORD, Length: 4, Data: 1
  8. HKLM\SOFTWARE\Duo Security\DuoTsg\UseUpnUsername SUCCESS Type: REG_DWORD, Length: 4, Data: 0
  9. HKLM\SOFTWARE\Duo Security\DuoTsg\EnableDuo SUCCESS Type: REG_DWORD, Length: 4, Data: 1
  10. HKLM\SOFTWARE\Duo Security\DuoTsg\EnableCertificateRevocationCheck NAME NOT FOUND Length: 144
  11. HKLM\SOFTWARE\Duo Security\DuoTsg\CredentialFormat_Unencrypted_Enable NAME NOT FOUND Length: 144
  12. HKLM\SOFTWARE\Duo Security\DuoTsg\CredentialFormat_Hmac_Enable NAME NOT FOUND Length: 144
  13. HKLM\SOFTWARE\Duo Security\DuoTsg\Callback_ValidateResponse NAME NOT FOUND Length: 144
  14. HKLM\SOFTWARE\Duo Security\DuoTsg\CredentialFormat_Hmac_Key SUCCESS Type: REG_SZ, Length: 2
  15. HKLM\SOFTWARE\Duo Security\DuoTsg\UnusedTicketMaxAge NAME NOT FOUND Length: 144
  16. HKLM\SOFTWARE\Duo Security\DuoTsg\ValidateClientIP NAME NOT FOUND Length: 144
  17. HKLM\SOFTWARE\Duo Security\DuoTsg\RequestClientStatementOfHealth NAME NOT FOUND Length: 144
  18. HKLM\SOFTWARE\Duo Security\DuoTsg\Debug NAME NOT FOUND Length: 144
  19. HKLM\SOFTWARE\Duo Security\DuoTsg\AuthorizedSession_MaxDuration SUCCESS Type: REG_DWORD, Length: 4, Data: 1
  20. HKLM\SOFTWARE\Duo Security\DuoTsg\AuthorizedSession_IdleTimeout SUCCESS Type: REG_DWORD, Length: 4, Data: 1
  21. HKLM\SOFTWARE\Duo Security\DuoTsg\AuthorizedSession_PermitUnlimitedDuration NAME NOT FOUND Length: 144
  22. HKLM\SOFTWARE\Duo Security\DuoTsg\AuthorizedSession_LimitSessionDurationToTicketDuration NAME NOT FOUND Length: 144
  23.  
  24. Last 4 are of particular note as they are "technically non-functional" according to Duo support but actually work for bypassing the stupid hard-coded 8 hour session limit built into the product.
  25.  
  26. AuthorizedSession_MaxDuration value should be minutes
  27. AuthorizedSession_IdleTimeout value should be minutes
  28. AuthorizedSession_PermitUnlimitedDuration should be a boolean 0 or 1
  29. AuthorizedSession_LimitSessionDurationToTicketDuration should be a boolean 0 or 1
  30.  
  31. Keywords/SEO:
  32. https://community.duo.com/t/duo-rd-gateway-cap-rap-session-timeout-settings/3377/38
  33. Duo, RDGW, Remote desktop gateway, CAP/RAP, CAP, RAP, Session timeout, session limit, disconnect, 8 hour.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!