[jira] [Commented] (GUACAMOLE-1164) Disable TOTP for specific users (Example: If the user is authenticated via DUO)

["Folke Ashberg (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-1164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342598#comment-17342598 ] 

Folke Ashberg commented on GUACAMOLE-1164:
------------------------------------------

i've had the same problem and here's my workaround:

If you set 'guac-totp-key-secret' of a user to something invalid (must not be NULL and not Empty) then the user can login without TOTP.

update guacamole_user_attribute set attribute_value='totpdisabled' where user_id=<userid> and attribute_name='guac-totp-key-secret';

> Disable TOTP for specific users (Example: If the user is authenticated via DUO)
> -------------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1164
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1164
>             Project: Guacamole
>          Issue Type: Wish
>          Components: guacamole-auth-totp
>            Reporter: Florian Obradovic
>            Priority: Minor
>
> Hey All,
> since the introduction of the more flexible behaviour in 1.2.0 I'm no longer able to disable TOTP for specific users.
> For some users we use guacamole-auth-DUO authentication as pre-authentication which makes TOTP obsolete. In the past we just didn't grant permission to "change own password" to effectively disable TOTP extension for these users. 
> This no longer works (see comments: https://issues.apache.org/jira/browse/GUACAMOLE-708)
> I would love to see an option to disable TOTP for specific users.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)