Support pincode backend failover

mricon / totp-cgi

A centralized totp solution based on google-authenticator

GNU General Public License v2.0

127 stars 30 forks source link

Support pincode backend failover #22

Open bgibson710 opened 10 years ago

bgibson710 commented 10 years ago

I have a setup where I want to allow multiple provisioning sources. I'm using the provided totpcgi-handler.pl file and I want to disable the ldap lookup stuff, and I'm running into difficulty. Is there an easy way to do this that I'm not seeing?

mricon commented 10 years ago

As in, you want to do multiple backends -- some account data coming from ldap, some coming from db, some coming from files?

bgibson710 commented 10 years ago

Correct. It works perfectly with my LDAP setup now, but I have a set of users that I don't want to have accounts there and I wanted to use the pincodes in a postgres database instead for those users, but still use the LDAP for the majority of my users.

mricon commented 10 years ago

Sorry, this is not currently possible -- there is no support for backend failover. Implementing it securely will be a challenge, which is why it wasn't done yet.