[tac_plus] Duo 2fa /w tac plus

[john heasley]

Mon, Oct 07, 2019 at 11:18:42PM +0000, Drew Weaver:
> Has anyone figured out how you can use Duo (owned by Cisco) as part of pam during the tac+ auth process? We really would like 2fa for all logins that arent used for config backups or route lookup APIs.
> 
> Any info would be most appreciated.

I have not, but I would expect it to be no different from RSA SecureID.
IIRC, there are notes in the tac_plus docs about using it.  I'm not in
a convenient place to look through those; feel free to email again if
you do not locate it.