#Long path tool 5.2.1 validation key install
#Long path tool 5.2.1 validation key code
#Long path tool 5.2.1 validation key password

Fixes the connectivity tool's error detection for mismatched TLS certificate keypairs.

When security_group_dn is defined in an ad_client section, the connectivity tool confirms that an LDAP search for the group distinguished name returns a result.

The authproxy_passwd tool now preserves comments when encrypting all passwords and secrets in the authproxy.cfg file with the -whole-config option.

Timestamps in authproxy.log output now show milliseconds.

#Long path tool 5.2.1 validation key code

Updates the Authentication Proxy's Windows service error exit code from 1 to 575.Fixes a condition that caused incorrectly-colored connectivity tool output.Corrects an issue running the connectivity tool on Windows while the Authentication Proxy itself was running.

#Long path tool 5.2.1 validation key password

The Windows-only password encryption utility now also decrypts previously-encrypted passwords in a configuration file.

The SIEM logging output to authevents.log now includes the client section name whenever possible.

Improves the error messaging when LDAP authentications fail because the service account bind failed.

Improves the log messaging when the Authentication Proxy attempts to determine use of password and factor concatenation.

The configuration checking performed by the connectivity tool now reports common misconfigurations for service account and authentication type combinations.

Improves the error messaging when user msds-principalname lookups fail.

Now suppresses system restarts by the Microsoft Visual C++ Redistributable installer during Authentication Proxy installation on Windows.

Upgrades a third-party library to address memory leaks during authentications.

Restricts access to the Authentication Proxy bin folder on Windows at installation.

Strips leading or trailing whitespace from RADIUS usernames during radius_iframe authentications.

Now reports the error code during SSPI negotiation failure.

Fixes a spurious 'no service account username is provided' warning from the connectivity tool when using Windows integrated authentication (SSPI).

Updates the Authentication Proxy's bundled OpenSSL to version 1.0.2x to address the NULL pointer dereference issue described in CVE-2020-1971.

Adds support for Duo Single Sign-On expired password resets.

The Linux installation script creates the necessary SELinux configuration (if appropriate) to allow start of the Authentication Proxy with systemd.

Mutes excessive tracebacks caused by rapidly opening and then closing incoming connections to ldap_server_auto configured with ad_client.

#Long path tool 5.2.1 validation key install

The Linux installer correctly expands tilde characters in the install path.

Fixes an issue that caused the Authentication Proxy not to reconnect to Duo automatically for SSO and Directory Sync after a period of degraded network connectivity.

An invalid section in authproxy.cfg no longer interferes with other valid configuration sections.

Introduced initial support for multiple Active Directory authentication sources with Duo Single Sign-On.

Fixed a bug causing the SELinux module installation to not work with custom installation directories.

The Linux Authentication Proxy installer now prompts the user to ask if the SELinux module should be installed if run interactively, and accepts -enable-selinux=yes|no at the command line.

The authproxy_connectivity_tool now exits with code 2 if there were connectivity issues.

This tool allows for configuring the Authentication Proxy, validating the configuration, and starting or stopping the Authentication Proxy service.

The Windows Authentication Proxy now ships with the Duo Authentication Proxy Manager.Release notes for recent Authentication Proxy versions.Дownload the current release from the Checksums and Downloads page.