DokuWiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== authg2fa Plugin ======

---- plugin ----
description: Another Google 2 Factor Authentication Plugin
author     : Andreas Böhler
email      : dev@aboehler.at
type       : Auth Plugin
lastupdate : 2016-11-04
compatible : Hrun, Binky, Ponder Stibbons, Detritus, Elenor Of Tsort
depends    : 
conflicts  : 
similar    : auth:mOTP, authgoogle2fa
tags       : 2FA, two-factor, Google, two-factor authentication, Google Authenticator

downloadurl: http://www.aboehler.at/hg/authg2fa/archive/tip.zip
bugtracker : https://code.rnb-consulting.at/tag/authg2fa_plugin
sourcerepo : http://www.aboehler.at/hg/authg2fa # eg. https://github.com//dokuwiki-plugin-authg2fa/
donationurl:

screenshot_img : 
----

===== Installation =====

Copy the unzipped folder to your /lib/plugins directory and activate the plugin. Then, set your options in Admin -> Configuration Settings. Don't forget to change the authentication type to authg2fa instead of authplain.

You can revert to authplain by editing your /conf/local.php file:

<code>$conf['authtype'] = 'authplain';</code>

===== Caveats =====

Using the standard DokuWiki settings, users aren't able to change their DokuWiki passwords anymore. They will be always prompted with "Wrong Password".

A DokuWiki setting can disable password verification on profile update:
<code>$conf['profileconfirm'] = false;</code>

The other problem is periodic rechecking of the user's credentials. By default, DokuWiki tries every 900 seconds to check the password. As there is no current 2FA secret available by that time, the check will fail and the user is logged out. You can increase the Timeout to, e.g. 24h, by settings:

<code>$conf['auth_security_timeout'] = 24*3600;</code>

===== Configuration and Settings =====

The available settings are as follows:
  * Enable/Disable G2FA authentication
  * Force G2FA authentication for all users (disallow others)
  * Hint G2FA (notify the user to update his/her profile)

The individual G2FA secrets can be configured in the user's profile and the QR Code displayed. An admin plugin is provided which allows the generation of new secrets. This is not yet feature complete.

===== Development =====

The plugin is heavily based on authgoogl2fa, but extended by many features. Feel free to comment and request features below.

You can follow the development on https://code.rnb-consulting.at/tag/authg2fa_plugin/

=== Change Log ===

{{rss>http://feeds.feedburner.com/dokuwiki-plugin-authg2fa date}}

===== Discussion =====

Please use the bug tracker at https://code.rnb-consulting.at/tag/authg2fa_plugin/

it would be nice if the user could test the just created/imported code to be sure that everything is ok.  --- [[user>Finkregh|Finkregh]] //2014-06-25 12:16//

Please fill all the letters into the box to prove you're human. V W F U E Please keep this field empty:

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International