James Muehlner created GUACAMOLE-1762:
-----------------------------------------
Summary: TOTP does not work when multiple jdbc auth extensions in
use
Key: GUACAMOLE-1762
URL: https://issues.apache.org/jira/browse/GUACAMOLE-1762
Project: Guacamole
Issue Type: Bug
Components: guacamole-auth-jdbc, guacamole-auth-totp
Affects Versions: 1.5.0
Reporter: James Muehlner
When the TOTP auth extension is used with a JDBC auth extension, a TOTP secret
will be generated and stored for each user. However, if multiple different JDBC
auth extensions are used simultaneously, a different key will be generated for
each, only one of which will be presented in the UI for ingestion into a TOTP
phone app or similar.
When attempting to authenticate, only the secret stored in the database that
presented the secret in the UI will generate a matching code - the other one
will never match, resulting in the auth attempt being rejected.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)