Steps to fix two factor auth setup error: Difference between revisions

No edit summary
No edit summary
 
Line 2: Line 2:
__FORCETOC__
__FORCETOC__
<div class="col-md-12 ibox-content">
<div class="col-md-12 ibox-content">
=Steps to fix two factor auth setup error=  
=Two factor auth error due to mismatched codes=  
<hr>
<hr>
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|}}
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}||}}
{{WIP}} 




====Problem====
====Problem====
Unable to configure two factor auth for the user and getting following error while entering 6 digit code during setup.   
Unable to configure two factor authentication for the user because of the following error when entering 6 digit code during setup.   


[[File:2FA_Error.PNG]]
[[File:2FA_Error.PNG]]
Line 15: Line 14:


====Solution====
====Solution====
We need to increase time windows offset limit for two factor authentication
We need to increase time windows offset limit for two factor authentication
 
  su - zimbra
  su - zimbra
  zmprov mcf zimbraTwoFactorTimeWindowOffset 15   
  zmprov mcf zimbraTwoFactorTimeWindowOffset 15   

Latest revision as of 14:13, 31 August 2018

Two factor auth error due to mismatched codes


   KB 23359        Last updated on 2018-08-31  




0.00
(0 votes)


Problem

Unable to configure two factor authentication for the user because of the following error when entering 6 digit code during setup.

2FA Error.PNG


Solution

We need to increase time windows offset limit for two factor authentication

su - zimbra
zmprov mcf zimbraTwoFactorTimeWindowOffset 15   
zmprov fc -a all

Note: If you still get same error with 15 then increase offset upto 30.


Attribute Description:
zmprov desc -a zimbraTwoFactorTimeWindowOffset

   Determines the number of windows to check when trying to validate a
   TOTP code (NOW-n through NOW+n). This number should typically be
   small, but a minimum value of 1 is usually necessary to account for
   network latency and clock drift. See also:
   zimbraTwoFactorTimeWindowLength and
   https://tools.ietf.org/html/rfc6238#section-5.2

              type : integer
             value :
          callback :
         immutable : false
       cardinality : single
        requiredIn :
        optionalIn : globalConfig
             flags :
          defaults : 1
               min : 1
               max :
                id : 1830
   requiresRestart :
             since : 8.7.0,9.0.0
   deprecatedSince :


Submitted by: Heera Singh Koranga
Verified Against: ZCS 8.8, 8.7 Date Created: 2017-08-23
Article ID: https://wiki.zimbra.com/index.php?title=Steps_to_fix_two_factor_auth_setup_error Date Modified: 2018-08-31



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search