#################
INSTRUCTIONS ONLY
#################

In order to pass group info MAVIS LDAP is required

TACGUI MAVIS <-> DUO LDAP Proxy <-> LDAP/AD Server

Example configuration for DUO Proxy

[ad_client]
host=IP_ADDRESS
service_account_username=LDAP_USER
service_account_password=LDAP_USER_PASS
search_dn=OU=Some_OU,DC=example,DC=com

[ldap_server_auto]
client=ad_client
ikey=#################
skey=#################
api_host=api-######.duosecurity.com
failmode=safe
allow_unlimited_binds=true
exempt_ou_1=CN=LDAP_USER,OU=Some_OU,DC=example,DC=com
exempt_primary_bind=false