Resettare la chiave TOTP in Guacamole

Con Script

• C'è uno script: Resetting Guacamole OTP for an user | Doing the blog thing

Manualmente

• Lanciare Mysql nel container docker del DB:

docker compose exec guacamole-db  bash -c 'mysql -u$MYSQL_USER -p$MYSQL_PASSWORD'

use guacamol_db;

• Identificare l'ID dello username da modificare:

SELECT user_id FROM guacamole_user INNER JOIN guacamole_entity ON guacamole_entity.entity_id = guacamole_user.entity_id WHERE guacamole_entity.name = 'guacadmin';

• Identificato l'ID, resettare il flag guac-totp-key-confirmed per quello user_id

UPDATE guacamole_user_attribute SET attribute_value='false' WHERE attribute_name = 'guac-totp-key-confirmed' and user_id = '1';

Riferimenti

• Resetting 2FA for Guacamole | Cloudron Forum

• Two-factor authentication with Guacamole 1.1.0 (Part 4) – Sebastian Mogilowski's Blog