James Muehlner created GUACAMOLE-1762:
-----------------------------------------

             Summary: TOTP does not work when multiple jdbc auth extensions in 
use
                 Key: GUACAMOLE-1762
                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1762
             Project: Guacamole
          Issue Type: Bug
          Components: guacamole-auth-jdbc, guacamole-auth-totp
    Affects Versions: 1.5.0
            Reporter: James Muehlner


When the TOTP auth extension is used with a JDBC auth extension, a TOTP secret 
will be generated and stored for each user. However, if multiple different JDBC 
auth extensions are used simultaneously, a different key will be generated for 
each, only one of which will be presented in the UI for ingestion into a TOTP 
phone app or similar.

When attempting to authenticate, only the secret stored in the database that 
presented the secret in the UI will generate a matching code - the other one 
will never match, resulting in the auth attempt being rejected.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to