Hi Mike,

After changing the timezone and leaving the default configuration settings, we 
didn't encounter the "failed verification" issue and were able to complete the 
MFA enrollment.

Thank you,

Delvain Mbina
Security Operations Engineer

M: (209) 305-0215


The Save Mart Companies

1600 Yosemite Blvd., Modesto, CA 95354

 

-----Original Message-----
From: Michael Jumper <mjum...@apache.org> 
Sent: Wednesday, August 16, 2023 12:02 PM
To: user@guacamole.apache.org
Subject: Re: TOTP Verification Failed During MFA Enrollment

On 8/15/2023 1:30 PM, Delvain Mbina wrote:
> Hi Mike,
> 
> I have checked the following:
> 
> 1) Server's clock: NTP is enabled and the local time is in sync. For good 
> measure, I changed the time zone to PST.

The timezone has no impact on the behavior of TOTP, which uses a timestamp in 
UTC.

Regardless of whether NTP is enabled, have you verified that the current system 
clock exactly matches a reliable public time source?

> 2) The only default option I changed was the "totp-issuer" setting.
> 

That should be fine.

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Reply via email to