Difference between revisions of "2FA error:invalid TOTP code"
(→How to merge two independent ZCS servers into ONE) |
(→2FA error:invalid_TOTP_code) |
||
| Line 1: | Line 1: | ||
| − | =2FA error: | + | =2FA error: invalid TOTP code= |
{{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|}} | {{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|}} | ||
| Line 6: | Line 6: | ||
==Description== | ==Description== | ||
| − | + | This wiki was followed when the error was observed: https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication | |
Step on which the error occur: | Step on which the error occur: | ||
| − | 1. configure the WebUI = OK | + | 1. configure the WebUI = OK <br> |
| − | 2. install and config the OTP [https://wiki.zimbra.com/wiki/TOTPApps smartphone app] = OK | + | 2. install and config the OTP [https://wiki.zimbra.com/wiki/TOTPApps smartphone app] = OK <br> |
| − | 3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL | + | 3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL <br> |
| Line 27: | Line 27: | ||
==Solution== | ==Solution== | ||
| − | Reason for the issue: time | + | Reason for the issue: time <br> |
| − | Synchronizing System Clock with Hardware Clock fixes the issue. | + | Synchronizing System Clock with Hardware Clock on the zimbra server fixes the issue. <br> |
Revision as of 13:44, 19 June 2017
2FA error: invalid TOTP code
Description
This wiki was followed when the error was observed: https://wiki.zimbra.com/wiki/Zimbra_Two-factor_authentication
Step on which the error occur:
1. configure the WebUI = OK
2. install and config the OTP smartphone app = OK
3. finishing the config, enter the 6 digit code from the smartphone app to the WebUI = FAIL
Exception
We have the following exception in mailbox.log when configuring 2FA:
2017-06-12 08:14:24,190 DEBUG [qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest] [name=user@domain.com;mid=9;ip=10.0.0.1;port=25641;ua=ZimbraWebClient - GC58 (Win)/8.7.9_GA_1794;] SoapEngine - handler exception: authentication failed for [user@domain.com], invalid TOTP code com.zimbra.cs.account.AccountServiceException$AuthFailedServiceException: authentication failed for [user@domain.com] ExceptionId:qtp1068934215-180:https:https://server.in/service/soap/EnableTwoFactorAuthRequest:1497235464190:2713fdd9f2f40... Code:account.TWO_FACTOR_AUTH_FAILED
Solution
Reason for the issue: time
Synchronizing System Clock with Hardware Clock on the zimbra server fixes the issue.
