Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

TwoFactorAdminLogin: Locks out admins permanently

More
1 week 2 days ago #271359 by lmsuser
LimeSurvey version: 6.15.5+250724
Own server or LimeSurvey Cloud: Own Server using Debian 12
Survey theme/template: n/a
==================
Have fresh installation of LimeSurvey and new to the platform as well and was happy to see that there was an out-of-the-box plugin (TwoFactorAdminLogin v1.3.0) to enable 2FA using Yubikeys. But, noticed also that it didn't work since when trying to login again using the 2FA I got error message about token wasn't correct. Disabled the plugin directly in the database (lms_plugins/active). When enabling the plugin again, the system gave me the following error message:
Code:
500: Internal Server Error - CDbCommand failed to execute the SQL statement: SQLSTATE[42S01]: Base table or view already exists: 1050 Table 'lms_user_mfa_settings' already exists

Q1: Where would I find the field which contains the user related data for the 2FA to reset the content?

Q2: Did see also that the plugin has settings for YubiKey Settings such as Client ID and optional field for Secret Key. Typically not needed for verification as it's more for developers related activities. Are there any additional input why and when these fields needs to be populated?

Q3: Beside me just disabling the plugin directly via the Db are there a more clean way of disabling the plugin? Do want to get it to work proper.
 

Please Log in to join the conversation.

More
1 week 2 days ago #271370 by jelo
What database is used? Perhaps you try the newest version of LimeSurvey before submitting a bug report.

Take a look at the comment section of this older bugreport. bugs.limesurvey.org/view.php?id=18352
Perhaps there is some hint what you might need to change in the settings.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users

Please Log in to join the conversation.

More
1 week 2 days ago #271372 by lmsuser

What database is used? Perhaps you try the newest version of LimeSurvey before submitting a bug report.

Take a look at the comment section of this older bugreport. bugs.limesurvey.org/view.php?id=18352
Perhaps there is some hint what you might need to change in the settings.
Since you're asking the backend db is running on MariaDB.

According to the old bugreport you shared it indicates fixed but seems still broken for now. Also, I would argue that the issue not being able to enable the 2FA plugin again from the web interface without having to manually delete the table for the 2FA plugin might not be the best solution.

Sure going to give an update tomorrow.

Please Log in to join the conversation.

Moderators: holchtpartner

Lime-years ahead

Online-surveys for every purse and purpose