jupyterhub / the-littlest-jupyterhub

Simple JupyterHub distribution for 1-100 users on a single server
https://tljh.jupyter.org
BSD 3-Clause "New" or "Revised" License
1.04k stars 341 forks source link

2FA no clearly outlined in authintication #396

Closed DuckieNukeEm closed 3 years ago

DuckieNukeEm commented 5 years ago

I'll be hosting a small base of users who will be loggin into the TLJH to do work, however they all have strongly expressed a desire in using Google Authenticator - Not their google account, mind you, but a time based two factor authentication through the Google Authenticator app in the Apple store or Google play store. TLJH It'll sit on an Ubuntu Server enviroment, and I would like to use libpam-google-authenticator module to set it up.

As I've dug through the documentation and file, I can't figure out how to set it up so that the user has a username, password, than a 2fa kick in. Can we get this either clearly documented or built natively into TLJH?

consideRatio commented 3 years ago

I think you can make use of google authenticator or any other one together with the NativeAuthenticator if configured for 2FA. I've verified I can use for example the 2FA app Authy with the nativeauthenticator, and I think the google authenticator would work as well.

I'll go ahead and close this in favor of #264 where I added a part about documentation.