search

glpi-project / glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
https://glpi-project.org
GNU General Public License v3.0
4.11k stars 1.27k forks source link

2FA Login Broken #17592

Open cconard96 opened 1 month ago

cconard96 commented 1 month ago

Trying to log in with an account with 2FA enabled redirects back to the login page instead of bringing up the TOTP code prompt. The data set in the session to indicate that the MFA/TFA process and for which user it is started for is not present after the redirect to /?mfa=1.

Tested clearing all sessions from Redis and the browser cookies. No effect. Possibly an issue since the recent Symfony work.

cedric-anne commented 1 month ago

I just tried to activate the 2FA on the glpi user on the main branch and it works as expected.

Do you have any error in logs or in the javascript console?

cconard96 commented 1 month ago

I always have the console open and don't remember seeing any. Will check later.

I was testing with a user from Active Directory.

cconard96 commented 1 month ago

I confirm the issue is present on an LDAP account, but not an internal one. So, maybe not related to recent framework changes.