search

TechnitiumSoftware / DnsServer

Technitium DNS Server
https://technitium.com/dns/
GNU General Public License v3.0
4.25k stars 418 forks source link

Feature request: multi-factor authentication (either TOTP and/or U2F) to secure user access to the GUI #488

Open zcyph opened 1 year ago

zcyph commented 1 year ago

Please consider adding support for an option to enable/require MFA/2FA like TOTP and/or U2F to secure user access to the GUI

ShreyasZare commented 1 year ago

Thanks for the feature request. TOTP is in my to-do list already but it will take a bit more time to implement it as a lot of features are already scheduled to be implemented.

derfabianpeter commented 1 year ago

Alternatively maybe you could support OpenID connect through generic providers like Authentik/Keycloak which typically have their own 2FA implementations. 2 birds with one stone

rapdodge commented 1 year ago

Bumping this... It'll be great to have TOTP 2FA :)

Node815 commented 9 months ago

+1 for OIDC as well. In this day and age, it is more important than ever to protect logins with MFA tokens and those aren't even enough, Passkey or Webauthn support is essential. With the support of using the OIDC inclusion, this will allow easier securing of our systems when on the road. Sure, we can place this behind a VPN or Wireguard, but sometimes this isn't feasible when in a workplace or network where those are not allowed.

Umplo commented 7 months ago

Bump. I'm putting additional pressure on this topic. We all know how important DNS is, and the potential implications of its compromise. TOTP for a web based DNS manager is an absolute necessity, and its absence is a dealbreaker for many.

That aside, a massive thank you to those maintaining this project. 🙂

Wrong-Code commented 6 months ago

Bumping as well on Oidc integration, it's getting more and more supported. I hope its implementation will be prioritized. A big thank you to whoever maintains this project. 👍

jftanner commented 5 days ago

Yet another vote for OIDC.

Most of my home network is behind Authentik, with strong 2FA, but I currently have no way to integrate Technitium. So, I have to maintain a separate credential for DNS management and keep the ingress restricted to local IPs. With OIDC (or proxy auth), I could properly integrate it with the rest of the system.