starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-12 05:20:31 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

Add 2-Factor Authentication to netbox #1639

New Issue
Closed
opened 2025-12-29 16:33:44 +01:00 by adam · 5 comments
adam commented 2025-12-29 16:33:44 +01:00
Owner
Copy Link

Originally created by @wenners on GitHub (Mar 22, 2018).

Issue type

[x] Feature request
[ ] Bug report
[ ] Documentation

Environment

  • Python version: 2.7.5
  • NetBox version: 2.3.2

Description

A detailed description of the proposed functionality

Add 2FA to netbox. Users should be able to log in securely by utilizing 2FA. Most commenly this would be a software generator for TOTP like Google Authenticator. It should also be possible for the Admin to enforce site-wide 2FA authentication, depending on the own paranoia / security demand.

A use case for the new feature

Netbox is holding the most crucial information about the site-wide infrastructure in the DC. This is very valuable information and should be protected and kept as secure as possible.
2FA will add an additional layer of security-

A rough description of any necessary changes to the database schema

No idea...

Any relevant third-party libraries which would be needed

Googling around I came across https://github.com/Bouke/django-two-factor-auth which is already a complete information of 2FA for Django which should fit very nicely to netbox. Reading through the documentation seemed like it should be no rocket-science to integrate this into netbox

Originally created by @wenners on GitHub (Mar 22, 2018). ### Issue type [x] Feature request <!-- An enhancement of existing functionality --> [ ] Bug report <!-- Unexpected or erroneous behavior --> [ ] Documentation <!-- A modification to the documentation --> ### Environment * Python version: 2.7.5 * NetBox version: 2.3.2 ### Description #### A detailed description of the proposed functionality Add 2FA to netbox. Users should be able to log in securely by utilizing 2FA. Most commenly this would be a software generator for TOTP like Google Authenticator. It should also be possible for the Admin to enforce site-wide 2FA authentication, depending on the own paranoia / security demand. #### A use case for the new feature Netbox is holding the most crucial information about the site-wide infrastructure in the DC. This is very valuable information and should be protected and kept as secure as possible. 2FA will add an additional layer of security- #### A rough description of any necessary changes to the database schema No idea... #### Any relevant third-party libraries which would be needed Googling around I came across https://github.com/Bouke/django-two-factor-auth which is already a complete information of 2FA for Django which should fit very nicely to netbox. Reading through the documentation seemed like it should be no rocket-science to integrate this into netbox
adam added the status: accepted label 2025-12-29 16:33:44 +01:00
adam closed this issue 2025-12-29 16:33:44 +01:00
adam commented 2025-12-29 16:33:44 +01:00
Author
Owner
Copy Link

@wenners commented on GitHub (Mar 23, 2018):

Sorry - I missed in my initial search #118 but it looks like there the mentioned framework for Django was back then not taken into consideration/not available. Please have a look at it, if that would be a feasable way for 2FA.
Thanks
Sebastian

@wenners commented on GitHub (Mar 23, 2018): Sorry - I missed in my initial search #118 but it looks like there the mentioned framework for Django was back then not taken into consideration/not available. Please have a look at it, if that would be a feasable way for 2FA. Thanks Sebastian
adam commented 2025-12-29 16:33:44 +01:00
Author
Owner
Copy Link

@LukeDRussell commented on GitHub (May 22, 2018):

https://github.com/digitalocean/netbox/issues/1677 would allow you to implement the MFA at the SAML provider, keeping Netbox out of it.

@LukeDRussell commented on GitHub (May 22, 2018): https://github.com/digitalocean/netbox/issues/1677 would allow you to implement the MFA at the SAML provider, keeping Netbox out of it.
adam commented 2025-12-29 16:33:44 +01:00
Author
Owner
Copy Link

@kkirsche commented on GitHub (Jul 1, 2018):

I'd recommend including support for universal second factor (U2F) to support hardware tokens such as the Yubikey. Today, U2F works with a number of publicly available and business-use services such as Google, Salesforce, Dropbox, Github, Gitlab, and Bitbucket accounts. As a result, having support for U2F would allow Netbox to integrate well with environments leveraging the extra security of hardware tokens

@kkirsche commented on GitHub (Jul 1, 2018): I'd recommend including support for universal second factor (U2F) to support hardware tokens such as the Yubikey. Today, U2F works with a number of publicly available and business-use services such as Google, Salesforce, Dropbox, Github, Gitlab, and Bitbucket accounts. As a result, having support for U2F would allow Netbox to integrate well with environments leveraging the extra security of hardware tokens
adam commented 2025-12-29 16:33:44 +01:00
Author
Owner
Copy Link

@efazenda commented on GitHub (Jul 31, 2018):

+1 for the support of Yubikey and U2F standard. (2FA is now the minimum of security best practices) is this possible to add priority on this feature ?

Thanks for the support and netbox !

Best Regards, Edouard Fazenda.

@efazenda commented on GitHub (Jul 31, 2018): +1 for the support of Yubikey and U2F standard. (2FA is now the minimum of security best practices) is this possible to add priority on this feature ? Thanks for the support and netbox ! Best Regards, Edouard Fazenda.
adam commented 2025-12-29 16:33:44 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Jan 4, 2019):

Folding this into #2328.

@jeremystretch commented on GitHub (Jan 4, 2019): Folding this into #2328.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label status: accepted
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#1639
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?