search

Keeper-Security / Commander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.
https://www.keepersecurity.com/commander.html
MIT License
189 stars 74 forks source link

Change description for TOTP #503

Open maik-swarco opened 3 years ago

maik-swarco commented 3 years ago

Whenever a user logs in for the first time, a 2FA might be needed. The selection menu only mentions the "Google authenticator" as a possibility but it accepts the Microsoft authenticator as well if it is set up by the company. Please change the Menu text to include it.

This account requires 2FA Authentication

  1. U2F (FIDO Security Key)
  2. Send SMS Code
  3. TOTP (Google Authenticator / Microsoft Authenticator)
  4. DUO q. Quit login attempt and return to Commander prompt Selection:

Thank you very much.

sk-keeper commented 3 years ago

Thank you for the feedback. The menu text will be changed to "Google and Microsoft Authenticator" in the next release

mac2000 commented 1 year ago

Hello, not sure if that was changed or not, but I have just downloaded and installed latest version

Not logged in> version
Commander Version: 16.8.24 (Current version)
Installation path: /usr/local/keepercommandercli/bin

My attempt to login:

Not logged in> login
...      User(Email): alexandrm@rabota.ua
Logging in to Keeper Commander
This account requires 2FA Authentication
  q. Quit login attempt and return to Commander prompt
Selection: q
Not logged in>

I do believe that I should have some options here (aka 2FA/totp which I use to login to Vault)

Just in case: macos 13.3.1, arm based, but i do believe it should not matter

Hm, short update, after restarting session, I did remembered that previously I have run suggested "server EU" command, and now, without it (being connected to US) I do see some options, but still after approving device, it seems that I have been switched back to EU and have no options anymore

Type your selection or <Enter> to resume: 

Device was approved

Redirecting to region: keepersecurity.eu
This account requires 2FA Authentication
  q. Quit login attempt and return to Commander prompt
Selection: q
Not logged in> login alexandrm@rabota.ua
Logging in to Keeper Commander
This account requires 2FA Authentication
  q. Quit login attempt and return to Commander prompt
Selection: q
Not logged in> server US
Keeper region is set to US
Not logged in> login alexandrm@rabota.ua
Logging in to Keeper Commander
Redirecting to region: keepersecurity.eu
This account requires 2FA Authentication
  q. Quit login attempt and return to Commander prompt
Selection:
sk-keeper commented 1 year ago

There was a bug that prevented Apple DNA 2FA from showing in the list of available 2FA options. This bug is fixed. Commander v16.8.24 binary release has been redeployed.

This account is registered in the EU data center so the backend redirects login attempt to EU once account is verified.

mac2000 commented 1 year ago

🙏

confirming, just downloaded and installed new version, now seems to be fine, at least got one new option to choose from

Not logged in> login alexandrm@rabota.ua
Logging in to Keeper Commander
Redirecting to region: keepersecurity.eu
This account requires 2FA Authentication
  1. Keeper DNA (Watch)  
  q. Quit login attempt and return to Commander prompt
Selection: 1

2FA Code Duration: Require Every Login.
To change duration: 2fa_duration=login|12_hours|24_hours|30_days|forever

Enter 2FA Code or Duration: 437191
Successfully verified 2FA Code.

Enter password for alexandrm@rabota.ua
Password: 
Updated config.json
Successfully authenticated with Password
Syncing...
Decrypted [489] record(s)
My Vault>

PS: just want to link #784 which definitely would help with updates