search

globaleaks / globaleaks-whistleblowing-software

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
https://www.globaleaks.org
Other
1.25k stars 274 forks source link

We have a user who cannot enter the application. It fails to identify itself. #4332

Closed cesar-sanjuan closed 1 day ago

cesar-sanjuan commented 1 day ago

What version of GlobaLeaks are you using?

5.0

What browser(s) are you seeing the problem on?

Chrome

What operating system(s) are you seeing the problem on?

Windows

Describe the issue

Sorry in advance for putting this question in the bug section, but I've put it in two other forums a few days ago and I haven't had any response and the truth is that we're in a hurry... We have a user who cannot enter the application. It fails to identify itself. From the user administration management we have generated the link to change the password. But when you run it, it asks for the security key and tells us that it doesn't have it. This is the user who manages the complaints, so it is necessary for them to have access. As administrators, how can we change the password so that they can access it? Thank you

Proposed solution

No response

evilaliv3 commented 1 day ago

Hello @cesar-sanjuan , thank you for your message, i will answer here but please use only discussions ofr this requests.

We try to do our best to answer requests that are always handled with maximum priority.

To change the password or send a link that does not require to enter the account recovery key you need an administrator enabled to change users password. Check the advanced settings to verify that you have enabled the escrow keys and which are currently the administrators that are enabled to change the passwords of the users.

reference: https://docs.globaleaks.org/en/stable/security/EncryptionProtocol.html#key-escrow