EDR: Cannot authenticate through Duo after upgrade

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Cannot authenticate to Duo after upgrading server
• /var/log/cb/coreservices/debug.log shows errors for missing fields

<err> cb.flask.blueprint_helpers - Unhandled exception from API request: 'uid'
Traceback (most recent call last):
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/flask/app.py", line 1950, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/flask/app.py", line 1936, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/usr/share/cb/virtualenv/lib/python3.9/site-packages/cb/flask/blueprints/auth_api_blueprint.py", line 137, in auth
  File "/usr/share/cb/virtualenv/lib/python3.9/site-packages/cb/flask/blueprints/auth_api_blueprint.py", line 50, in _check_2fa
  File "/usr/share/cb/virtualenv/lib64/python3.9/site-packages/werkzeug/datastructures.py", line 269, in pop
    rv = super(UpdateDictMixin, self).pop(key)
KeyError: 'uid'

 

Environment

• EDR Server: All Versions
• Duo Authentication

Cause

/usr/share/cb/plugins/duo/secrets.ini was overwritten during upgrade

Resolution

• This issue is expected to be resolved in EDR server version 7.8.0 - CB-27628 & CB-37187
• Workaround
  1. Manually update /usr/share/cb/plugins/duo/secrets.ini with previous settings.
  2. Restart services