znuny / Znuny4OTRS-PasswordPolicy

An extension to improve the password policy in OTRS.
https://www.znuny.com/add-ons/password-policy
4 stars 4 forks source link

Password Policy with Two Factor Authentication (2FA) #6

Closed naitso closed 3 years ago

naitso commented 3 years ago

Hi On OTRS 6.0.30 have enabled the package Znuny4OTRS-PasswordPolicy 6.0.6, all work fine till enabled two-factor authentication (2FA) so the agents cannot change his/her password.

With both option enabled (Znuny4OTRS-PasswordPolicy and 2FA) when the Agent must change the password the system does not accept the new password because (i think) expects the token, to validate the change.

How to reproduce

After installed and configure Password Policy (these are mine settings) image

Go to System Configuration > Core > Auth > Agent > TwoFactor Enable only AuthTwoFactorModule and leave the others settings by default image

When Agent have to change the password the screen are like this image

image

from system log i see this entries image

Server

Client

Additional information

As mention before, if disable 2FA the add-on PasswordPolicy work well NOTE: i changed PasswordMaxValidTimeInDays to 60 (that are differ from change password screen) to temporary permit Agent login without disable 2FA

Thanks in advance naitso

dennykorsukewitz commented 3 years ago

Hi @naitso

the system does not accept the new password because (i think) expects the token, to validate the change.

I think you're right about that.

Currently, the AuthTwoFactorModule is not supported in Znuny4OTRS-PasswordPolicy.

We need to look at this again, but I can't say exactly when, as we have other priorities at the moment. We would appreciate your support via pull request.

best regards 🚀 Denny

dennykorsukewitz commented 3 years ago

https://github.com/znuny/Znuny4OTRS-PasswordPolicy/commit/aa35abfe32e6d6ec16db735678c1f1bcfbbc04f2

dennykorsukewitz commented 3 years ago

Hi @naitso

have a look at version 6.0.7. I have expanded a few things here.

https://github.com/znuny/Znuny4OTRS-PasswordPolicy/releases/tag/rel-6.0.7

Give me your feedback then.

Denny

naitso commented 3 years ago

Hi @dennykorsukewitz I confirm, with version 6.0.7 it's working image

You were so quickly Thank you very much!