Passing secondary password on command-line (Linux)

[Carl Ponder]

I can open a VPN connection using the form

/opt/pulsesecure/bin/pulselauncher -U https://gateway.domain -r domain -u $VPNID -p $PASSWORD

It makes me re-enter the ID and a second (fixed) password that tells it to issue a Duo-push request:

User Name:
Password:

How can I pass these additional fields on the command-line?

[Carl Ponder]

When I use the GUI interface, it pulls up a secondary window to enter these last 2 parameters. The GUI doesn't auto-fill any of this, in spite of the fields being identical every time.

I want to roll this up into a macro so I don't have to enter anything.

[Carl Ponder]

Piping multiple lines of input to the command

| /opt/pulsesecure/bin/pulselauncher ....

doesn't work either, likely because the password is read from a different channel than STDIN so it won't show.

[zanyterp]

unfortunately, yes, you are correct that this is not possible; only single-factor credentials can be sent through the command-line launcher (both the platforms that have it). does enabling the automatic push option on your duo registration meet your need?

[Carl Ponder]

That sounds like what I need. How do I enable it?

[Carl Ponder]

From the command-line, preferably.

[Carl Ponder]

Actually, I've just gotten what I wanted using the Ubuntu 22.04 Network menu.
It's saving both the passwords and the server at the other end kicks off the Duo-handshake successfully.

[zanyterp]

i am glad to hear you were able to get this working in the way you need