Bug Invalid Code Entered

Status
Not open for further replies.
Up until recently, I hadn't been having any issues with 2FA on our forums, but now when anyone attempts to enter a code from the code generator to the forums, it gives them the 'Invalid authentication code' error. I verified that the system time was set correctly as referenced in this thread. For the moment, as dozens of users are unable to login to our forums, I've disabled the plugin until a solution can be found.
 
Could you please create and PM me with a temporary FTP and AdminCP account?

For security reasons, we recommend you create a new FTP account only for DBTech support, then disable or delete it after we have both confirmed the issue has been solved and there are no further issues.

The same applies to AdminCP accounts; they should ideally be temporary accounts created for us only. If we have created an account on your site already, you can optionally boost that account to Administrator and then de-admin this account once the issue has been solved.

If you use a .htaccess password protection for your AdminCP directory, it is recommended that you create a new authorised user for DBTech and remove this user once the issue has been solved.

Please test any temporary accounts you create to ensure that the FTP account has access to the forum files, and that the AdminCP account can access the administrative controls for the product we are assisting you with.

Ensuring this is all in order before submitting the information will significantly speed up the process of assisting you. We will alert you via PM if there's any issues with the login information you have provided.

When sending the PM, for your security you should also un-tick the "Save a copy in my Sent Items folder" checkbox. When the access details have been received, we will delete the PM from our inbox. Ensuring you have not kept a copy of the PM reduces the risk of security breaches.

Thank you for helping us debug our products and allowing us to assist you, we appreciate it :D
 
That may be a bit difficult as we don't have a FTP server installed on the machine and only utilize SSH/SFTP for access, along with IP whitelisting for said access.
 
Update: While I can replicate this issue @ your site, I'm unable to replicate it anywhere else, leading me to believe it is a server timing issue. I can't actually modify the files to test, as my FTP user does not have write permission on any of the PHP files on the server.
 
I did adjust PHP's server timezone to the same as the set server time (America/Chicago) and restarted Apache. Are there any particular ideas I should try?
 
Looks like NTP was the issue and I've at least personally verified that the authentication is working properly again. Thank you for the help!
 
Hello Devin Lee Clark,

This ticket has now been closed with the status Not A Bug.

We hope your issue or question has been addressed to your satisfaction. If not, please feel free to re-open it by clicking this link.

If you have any further issues or questions, please feel free to start a new support ticket via the button at the top of every page.

Thank you!
 
Status
Not open for further replies.

Legacy Two-Factor Authentication

vBulletin 3.8.x vBulletin 4.x.x
Seller
DragonByte Technologies
Release date
Last update
Total downloads
164
Customer rating
0.00 star(s) 0 ratings
Back
Top