starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-13 22:03:32 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

2FA via TOTP or Yubikey #7026

New Issue
Closed
opened 2025-12-29 19:48:02 +01:00 by adam · 5 comments
adam commented 2025-12-29 19:48:02 +01:00
Owner
Copy Link

Originally created by @jf-sfy on GitHub (Sep 26, 2022).

NetBox version

v3.3.4

Feature type

New functionality

Proposed functionality

Would be useful to add two factor authentication to netbox.

Users would register their 2fa either as a TOTP app such as the google authenticator, or via a physical device such as a yubikey.

Once registered, when the user tries to login, once they have done username and password, they will be asked for their 2nd factor code, either as a 6 digit TOTP code, or by touching their yubikey, granting them access.

Use case

While many people use LDAP authentication, and the 2fa options provided by a single sign on. This creates a dependency on the LDAP server to be able to login. In the event that the AD/LDAP server is down, being unable to login to netbox, to work out where in the DC the machine is located would be rather embarrassing. The option for enhancing security through TOTP or yubikey authentication would be a great improvement.

Database changes

Not sure. I'm not a developer, and I don't know the code base so I can't say what would need changing in the internals.

External dependencies

Ideally none, totp and yubikey should be possible in a standalone way such that as long as the machine netbox is running is up, it works, without needing to federate authentication against another device.

Originally created by @jf-sfy on GitHub (Sep 26, 2022). ### NetBox version v3.3.4 ### Feature type New functionality ### Proposed functionality Would be useful to add two factor authentication to netbox. Users would register their 2fa either as a TOTP app such as the google authenticator, or via a physical device such as a yubikey. Once registered, when the user tries to login, once they have done username and password, they will be asked for their 2nd factor code, either as a 6 digit TOTP code, or by touching their yubikey, granting them access. ### Use case While many people use LDAP authentication, and the 2fa options provided by a single sign on. This creates a dependency on the LDAP server to be able to login. In the event that the AD/LDAP server is down, being unable to login to netbox, to work out where in the DC the machine is located would be rather embarrassing. The option for enhancing security through TOTP or yubikey authentication would be a great improvement. ### Database changes Not sure. I'm not a developer, and I don't know the code base so I can't say what would need changing in the internals. ### External dependencies Ideally none, totp and yubikey should be possible in a standalone way such that as long as the machine netbox is running is up, it works, without needing to federate authentication against another device.
adam added the type: featurepending closurestatus: revisions needed labels 2025-12-29 19:48:02 +01:00
adam closed this issue 2025-12-29 19:48:02 +01:00
adam commented 2025-12-29 19:48:03 +01:00
Author
Owner
Copy Link

@fred974 commented on GitHub (Sep 26, 2022):

+1 vote from me.
Netbox contain all our sensitive data in relation to the network/VM. Securing it with TOTP is almost the norme in 2022

@fred974 commented on GitHub (Sep 26, 2022): +1 vote from me. Netbox contain all our sensitive data in relation to the network/VM. Securing it with TOTP is almost the norme in 2022
adam commented 2025-12-29 19:48:03 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Sep 26, 2022):

Thank you for your interest in extending NetBox. Unfortunately, the information you have provided does not constitute an actionable feature request. Per our contributing guide, a feature request must include a thorough description of the proposed functionality, including any database changes, new views or API endpoints, and so on. It must also include a detailed use case justifying its implementation. If you would like to elaborate on your proposal, please modify your post above. If sufficient detail is not added, this issue will be closed.

@jeremystretch commented on GitHub (Sep 26, 2022): Thank you for your interest in extending NetBox. Unfortunately, the information you have provided does not constitute an actionable feature request. Per our [contributing guide](https://github.com/netbox-community/netbox/blob/develop/CONTRIBUTING.md), a feature request must include a thorough description of the proposed functionality, including any database changes, new views or API endpoints, and so on. It must also include a detailed use case justifying its implementation. If you would like to elaborate on your proposal, please modify your post above. If sufficient detail is not added, this issue will be closed.
adam commented 2025-12-29 19:48:03 +01:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Nov 26, 2022):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Do not attempt to circumvent this process by "bumping" the issue; doing so will result in its immediate closure and you may be barred from participating in any future discussions. Please see our contributing guide.

@github-actions[bot] commented on GitHub (Nov 26, 2022): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. **Do not** attempt to circumvent this process by "bumping" the issue; doing so will result in its immediate closure and you may be barred from participating in any future discussions. Please see our [contributing guide](https://github.com/netbox-community/netbox/blob/develop/CONTRIBUTING.md).
adam commented 2025-12-29 19:48:04 +01:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Dec 26, 2022):

This issue has been automatically closed due to lack of activity. In an effort to reduce noise, please do not comment any further. Note that the core maintainers may elect to reopen this issue at a later date if deemed necessary.

@github-actions[bot] commented on GitHub (Dec 26, 2022): This issue has been automatically closed due to lack of activity. In an effort to reduce noise, please do not comment any further. Note that the core maintainers may elect to reopen this issue at a later date if deemed necessary.
adam commented 2025-12-29 19:48:04 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Dec 27, 2022):

For anyone interested, @k1nky created a plugin that seems to fulfill this function.

@jeremystretch commented on GitHub (Dec 27, 2022): For anyone interested, @k1nky created a [plugin](https://github.com/k1nky/netbox-otp-plugin) that seems to fulfill this function.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label pending closure status: revisions needed type: feature
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#7026
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?