Document warning about time being in sync importance - Githubissues

maldua-suite / zimbra-ose-2fa

Two factor authentication for Zimbra OSE

13 stars 5 forks source link

Document warning about time being in sync importance #10

Closed adriangibanelbtactic closed 9 months ago

adriangibanelbtactic commented 11 months ago

It's absolutely needed to document somewhere that time needs to be in sync with global clocks thanks to tools such as:

ntpd
systemd-timesyncd

otherwise the final user might get a wrong password even if it's the correct one.

Additionally comment on zimbraTwoFactorTimeWindowOffset attribute described in https://wiki.zimbra.com/wiki/Steps_to_fix_two_factor_auth_setup_error .
Additionally comment on the OTP device (Usually Google Authenticator) that needs time to be in sync too.

An actual issue where this problem is described: https://github.com/btactic/zimbra-ose-2fa/issues/6