search

glpi-project / glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
https://glpi-project.org
GNU General Public License v3.0
4.36k stars 1.3k forks source link

2FA Login Broken #17592

Open cconard96 opened 4 months ago

cconard96 commented 4 months ago

Trying to log in with an account with 2FA enabled redirects back to the login page instead of bringing up the TOTP code prompt. The data set in the session to indicate that the MFA/TFA process and for which user it is started for is not present after the redirect to /?mfa=1.

Tested clearing all sessions from Redis and the browser cookies. No effect. Possibly an issue since the recent Symfony work.

cedric-anne commented 4 months ago

I just tried to activate the 2FA on the glpi user on the main branch and it works as expected.

Do you have any error in logs or in the javascript console?

cconard96 commented 4 months ago

I always have the console open and don't remember seeing any. Will check later.

I was testing with a user from Active Directory.

cconard96 commented 4 months ago

I confirm the issue is present on an LDAP account, but not an internal one. So, maybe not related to recent framework changes.

github-actions[bot] commented 2 months ago

There has been no activity on this issue for some time and therefore it is considered stale and will be closed automatically in 10 days.

If this issue is related to a bug, please try to reproduce on latest release. If the problem persist, feel free to add a comment to revive this issue. If it is related to a new feature, please open a topic to discuss with community about this enhancement on suggestion website.

You may also consider taking a subscription to get professionnal support or contact GLPI editor team directly.