diff options
| author | Achilleas Pipinellis <axilleas@axilleas.me> | 2017-03-15 10:57:17 +0000 |
|---|---|---|
| committer | Achilleas Pipinellis <axilleas@axilleas.me> | 2017-03-15 10:57:17 +0000 |
| commit | cbedb34a576433ede8f17ba16699f2556651a030 (patch) | |
| tree | dad9e30240d2d85b23f22954d6dd1c4c21843314 | |
| parent | 77d54141ae6a26d1299acd3f4fac81a035589a84 (diff) | |
| parent | 7951b8469d81f58132f69ad3a1e71fbd39ef1f49 (diff) | |
| download | gitlab-ce-cbedb34a576433ede8f17ba16699f2556651a030.tar.gz | |
Merge branch '28277-document-u2f-limitations-with-multiple-urls' into 'master'
Resolve "Document U2F limitations with multiple URLs"
Closes #28277
See merge request !9300
| -rw-r--r-- | changelogs/unreleased/28277-document-u2f-limitations-with-multiple-urls.yml | 4 | ||||
| -rw-r--r-- | doc/user/profile/account/two_factor_authentication.md | 11 |
2 files changed, 15 insertions, 0 deletions
diff --git a/changelogs/unreleased/28277-document-u2f-limitations-with-multiple-urls.yml b/changelogs/unreleased/28277-document-u2f-limitations-with-multiple-urls.yml new file mode 100644 index 00000000000..6e3cd8a60d8 --- /dev/null +++ b/changelogs/unreleased/28277-document-u2f-limitations-with-multiple-urls.yml @@ -0,0 +1,4 @@ +--- +title: Document U2F limitations with multiple URLs +merge_request: 9300 +author: diff --git a/doc/user/profile/account/two_factor_authentication.md b/doc/user/profile/account/two_factor_authentication.md index eaa39a0c4ea..63a3d3c472e 100644 --- a/doc/user/profile/account/two_factor_authentication.md +++ b/doc/user/profile/account/two_factor_authentication.md @@ -215,3 +215,14 @@ you may have cases where authorization always fails because of time differences. [Google Authenticator]: https://support.google.com/accounts/answer/1066447?hl=en [FreeOTP]: https://freeotp.github.io/ [YubiKey]: https://www.yubico.com/products/yubikey-hardware/ + +- The GitLab U2F implementation does _not_ work when the GitLab instance is accessed from +multiple hostnames, or FQDNs. Each U2F registration is linked to the _current hostname_ at +the time of registration, and cannot be used for other hostnames/FQDNs. + + For example, if a user is trying to access a GitLab instance from `first.host.xyz` and `second.host.xyz`: + + - The user logs in via `first.host.xyz` and registers their U2F key. + - The user logs out and attempts to log in via `first.host.xyz` - U2F authentication suceeds. + - The user logs out and attempts to log in via `second.host.xyz` - U2F authentication fails, because + the U2F key has only been registered on `first.host.xyz`. |