2FA error:invalid TOTP code: Difference between revisions
(One intermediate revision by the same user not shown) | |||
Line 1: | Line 1: | ||
=2FA error: | =2FA error: invalid TOTP code= | ||
{{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|}} | {{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|}} | ||
Line 6: | Line 6: | ||
==Description== | ==Description== | ||
This wiki was followed when the error was observed: https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication | |||
Step on which the error occur: | Step on which the error occur: | ||
1. configure the WebUI = OK | 1. configure the WebUI = OK <br> | ||
2. install and config the OTP [https://wiki.zimbra.com/wiki/TOTPApps smartphone app] = OK | 2. install and config the OTP [https://wiki.zimbra.com/wiki/TOTPApps smartphone app] = OK <br> | ||
3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL | 3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL <br> | ||
Line 19: | Line 19: | ||
We have the following exception in mailbox.log when configuring 2FA: | We have the following exception in mailbox.log when configuring 2FA: | ||
2017-06-12 08:14:24,190 DEBUG [qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest] [name=user@domain.com;mid=9;ip=10.0.0.1;port=25641;ua=ZimbraWebClient - GC58 (Win)/8.7.9_GA_1794;] SoapEngine - handler exception: authentication failed for [user@domain.com], '''invalid TOTP code''' | 2017-06-12 08:14:24,190 DEBUG [qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest] <br>[name=user@domain.com;mid=9;ip=10.0.0.1;port=25641;ua=ZimbraWebClient - GC58 (Win)/8.7.9_GA_1794;] <br> SoapEngine - handler exception: authentication failed for [user@domain.com], '''invalid TOTP code''' | ||
com.zimbra.cs.account.AccountServiceException$AuthFailedServiceException: authentication failed for [user@domain.com] | com.zimbra.cs.account.AccountServiceException$AuthFailedServiceException: authentication failed for [user@domain.com] | ||
ExceptionId:qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest:1497235464190:2713fdd9f2f40... | ExceptionId:qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest:1497235464190:2713fdd9f2f40... | ||
Line 27: | Line 27: | ||
==Solution== | ==Solution== | ||
Reason for the issue: time | Reason for the issue: '''time''' <br> | ||
Synchronizing System Clock with Hardware Clock fixes the issue. | ''Synchronizing System Clock with Hardware Clock on the zimbra server fixes the issue''. <br> | ||
Latest revision as of 13:48, 19 June 2017
2FA error: invalid TOTP code
Description
This wiki was followed when the error was observed: https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication
Step on which the error occur:
1. configure the WebUI = OK
2. install and config the OTP smartphone app = OK
3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL
Exception
We have the following exception in mailbox.log when configuring 2FA:
2017-06-12 08:14:24,190 DEBUG [qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest]
[name=user@domain.com;mid=9;ip=10.0.0.1;port=25641;ua=ZimbraWebClient - GC58 (Win)/8.7.9_GA_1794;]
SoapEngine - handler exception: authentication failed for [user@domain.com], invalid TOTP code com.zimbra.cs.account.AccountServiceException$AuthFailedServiceException: authentication failed for [user@domain.com] ExceptionId:qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest:1497235464190:2713fdd9f2f40... Code:account.TWO_FACTOR_AUTH_FAILED
Solution
Reason for the issue: time
Synchronizing System Clock with Hardware Clock on the zimbra server fixes the issue.