[ 
https://issues.apache.org/jira/browse/GUACAMOLE-1164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342598#comment-17342598
 ] 

Folke Ashberg commented on GUACAMOLE-1164:
------------------------------------------

i've had the same problem and here's my workaround:

If you set 'guac-totp-key-secret' of a user to something invalid (must not be 
NULL and not Empty) then the user can login without TOTP.

update guacamole_user_attribute set attribute_value='totpdisabled' where 
user_id=<userid> and attribute_name='guac-totp-key-secret';

> Disable TOTP for specific users (Example: If the user is authenticated via 
> DUO)
> -------------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1164
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1164
>             Project: Guacamole
>          Issue Type: Wish
>          Components: guacamole-auth-totp
>            Reporter: Florian Obradovic
>            Priority: Minor
>
> Hey All,
> since the introduction of the more flexible behaviour in 1.2.0 I'm no longer 
> able to disable TOTP for specific users.
> For some users we use guacamole-auth-DUO authentication as pre-authentication 
> which makes TOTP obsolete. In the past we just didn't grant permission to 
> "change own password" to effectively disable TOTP extension for these users. 
> This no longer works (see comments: 
> https://issues.apache.org/jira/browse/GUACAMOLE-708)
> I would love to see an option to disable TOTP for specific users.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to