[jira] [Comment Edited] (GUACAMOLE-272) Add 2FA Support to JDBC Authentication

["Michael Jumper (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-272?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16180126#comment-16180126 ] 

Michael Jumper edited comment on GUACAMOLE-272 at 9/26/17 2:49 AM:
-------------------------------------------------------------------

{quote}
... bolt on to JDBC modules, separate module, etc. ...
{quote}

I have some ideas in that regard. I was thinking of taking up the TOTP / Google Authenticator work in the near future, and was looking into possible ways that would integrate with existing things like the JDBC auth. I think it should be possible, through minor changes to the extension API, to allow extensions to augment/decorate the objects returned by other extensions, or to voluntarily store and retrieve custom attributes added by other extensions.


was (Author: mike.jumper):
> ... bolt on to JDBC modules, separate module, etc. ...

I have some ideas in that regard. I was thinking of taking up the TOTP / Google Authenticator work in the near future, and was looking into possible ways that would integrate with existing things like the JDBC auth. I think it should be possible, through minor changes to the extension API, to allow extensions to augment/decorate the objects returned by other extensions, or to voluntarily store and retrieve custom attributes added by other extensions.

> Add 2FA Support to JDBC Authentication
> --------------------------------------
>
>                 Key: GUACAMOLE-272
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-272
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-auth-jdbc
>    Affects Versions: 0.9.13-incubating
>            Reporter: Chris Wheeler
>            Priority: Minor
>
> I love the fact that you support 2 factor authentication, but I am disappointed it costs money when you have more than 10 users. I would like to propose that you implement a simple native 2FA option. All you would need to do is add a configurable email field for each user, and configurable SMTP settings. When the user logs in, it would prompt for a pin, then send that pin to their email address.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)