2fa webapp options.

robing

So i did some quick debugging and this line is the cause of the problem https://stash.kopano.io/projects/KW/repos/kopano-webapp/browse/index.php#226 in theory you can comment it out and WebApp should work normally, but this is added for https://jira.kopano.io/browse/KW-3552 so a real fix should be made in the plugin itself

I’m not into PHP so i have no idea how to solve it correctly in the plugin itself but maybe someone has an pointer now to do that now

norman

The problems with Google2FA are related to the loss of session variables. So https://stash.kopano.io/projects/KW/repos/kopano-webapp/browse/index.php#226 could be the cause of this. Please note that this has also effect of Goole2FA functionality - not only the presentation.

Norman

@norman

Hi Norman. The project is not continued (google2fa)

Are there any alternatives?

The 2fa gives us a extra security layer.

norman

Unfortunately, I had to stop the development of Googl2FA due to time constraints. I do not provide an alternative. Kopano works on new security features.

If someone wants to run Google2FA with the new WebApp versions, the session can be restarted in the plugin and, if necessary, closed again. But I couldn’t test that.

https://bitbucket.org/normanth/google2fa/src/master/php/plugin.google2fa.php row 80

session_start();

https://bitbucket.org/normanth/google2fa/src/master/php/plugin.google2fa.php between rows 93/94

session_write_close();

With the new php versions mcrypt (to (de)crypt secret etc.) is not available. The Google2FA version from repository supports SSH. If necessary, the authentication must be reset.

Norman

@norman

Thanks for your answer. this indeed is the solution for the problem.

@norman

One lsat question Norman. The single sign on codes are not working. its not accepting the codes.

Is there something i can do about this?

norman

@ckruijntjens I don’t know - try to reset the plugin and reconfigure the 2FA in the WebApp…

GeeGee

It is pretty dramatic that there is neither Support in this Plugin nor an official Feature available.
For the webapp this is a pure must. In fact fido2 Support would be nice too.

boospy

You can install the 2Factor Package easy from us repository.
https://apt.iteas.at

apt install kopano-webapp-plugin-2fa-google

@boospy is this plugin also maintained?

boospy

We use the plugin on all us customers. So if an update are necessary, we build an new package.

The DEV’s website is here: https://www.familiethimm.de/google2fa-kopano-zarafa-2-faktor-authentifizierung-2fa-google-authenticator/download-installation/

norman

@boospy The plugin is no longer supported / developed by the developer (me).

boospy

@norman said in 2fa webapp options.:

@boospy The plugin is no longer supported / developed by the developer (me).

Really… oh no… on from the absolutly best plugins…

marty

@norman Would it make sense to move it to github instead, allowing for people to fork it/fixing current issues etc.

norman

@marty the sources are in BitBucket (https://bitbucket.org/normanth/google2fa/). It’s possible to create a fork
and I can add developers, too. The sources can also be moved! How to create a version is on my homepage. https://www.familiethimm.de/google2fa-kopano-zarafa-2-faktor-authentifizierung-2fa-google-authenticator/development/

GeeGee

Anything new on 2FA in Kopano? It is so frustrating to see such a good plugin getting abandoned.

boospy

@geegee said in 2fa webapp options.:

Anything new on 2FA in Kopano? It is so frustrating to see such a good plugin getting abandoned.

Well, if I knew how to programme, I would have snatched it up long ago.

GeeGee

This post is deleted!

boospy

So far, it still works. You can simply install the DEB package from our Enterprise Repo.

apt install kopano-webapp-plugin-2fa-google

Test the package beforehand. As it is tailored to our environments.
Package Index: http://apt.iteas.at/iteas/pool/main/k/