Secure Data Directory with Double Authentication

A method, comprising:

• based on determining that an identification of a user account is omitted from a multifactor authentication extended attribute of a directory, comparing, by a system comprising at least one processor, a first passphrase of a first file and a second passphrase of a second file to produce a result, wherein the first file is identified by a request associated with the user account to write the first file to the directory, and wherein the second file is stored in the directory;
• based on the result indicating that the first passphrase matches the second passphrase, adding, by the system, the identification of the user account to the multifactor authentication extended attribute of the directory;
• and
• permitting, by the system, operations on the directory via the user account based on the multifactor authentication extended attribute comprising the identification of the user account.

A non-transitory computer-readable medium comprising instructions that, in response to execution, cause a system comprising at least one processor to perform operations, comprising:

• based on determining that an identification of a user account is omitted from an extended attribute of a directory, comparing a first passphrase of a first file and a second passphrase of a second file to produce a result, wherein the first file is identified by a request associated with the user account to write the first file to the directory, and wherein the second file is stored in the directory;
• and
• based on the result indicating that the first passphrase matches the second passphrase,
• adding the identification of the user account to the extended attribute of the directory, and
• enabling operations, initiated from the user account, on the directory based on the extended attribute comprising the identification of the user account.