Yes, users can set up Duo by themselves. If 10 users use their own Duo accounts on the same host, they're replicating the work to manage their own Duo configura

Yes, users can set up Duo by themselves. If 10 users use their own Duo accounts on the same host, they're replicating the work to manage their own Duo configurations, is all (and there's no centralized management of those users' credentials by the system administrator). Currently, duo_unix does not have a non-service option to use manually-configured local secrets. It's something that could be added easily, but at the expense of centralized management, logging, audit, enrollment, etc. Folks who only want to use one-time credentials they need to manually provision for each account are probably better off using OPIE or Google Authenticator for now.