From a97bf2dd897caa5a6eafa4661e16dfe2cd4c4d20 Mon Sep 17 00:00:00 2001 From: hamid ghaf Date: Mon, 23 Jan 2023 16:33:09 -0800 Subject: [PATCH 1/2] Provide IP Address in Duo Request --- vault/login_mfa.go | 1 + 1 file changed, 1 insertion(+) diff --git a/vault/login_mfa.go b/vault/login_mfa.go index c98389225655..2a7ac6c19a73 100644 --- a/vault/login_mfa.go +++ b/vault/login_mfa.go @@ -1951,6 +1951,7 @@ func (c *Core) validateDuo(ctx context.Context, mfaFactors *MFAFactor, mConfig * } } + options = append(options, authapi.AuthIpAddr(reqConnectionRemoteAddr)) options = append(options, authapi.AuthUsername(username)) options = append(options, authapi.AuthAsync()) From f78aae5051138c83b271b74af9b2af6a2c89d4f5 Mon Sep 17 00:00:00 2001 From: hamid ghaf Date: Mon, 23 Jan 2023 16:47:26 -0800 Subject: [PATCH 2/2] CL --- changelog/18811.txt | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 changelog/18811.txt diff --git a/changelog/18811.txt b/changelog/18811.txt new file mode 100644 index 000000000000..34a155dda5a4 --- /dev/null +++ b/changelog/18811.txt @@ -0,0 +1,3 @@ +```release-note:improvement +auth: Provide an IP address of the requests from Vault to a Duo challenge after successful authentication. +```