2FA authentication logon server required

[ramizuabhalim]

Hi Support,

In vicidial system, can we have 2FA authentication when we login on server such as every cluster servers?
If yes, may I know what is the method we can achieve that?

Vicibox 9
Version: 2.14b0.5
SVN Version: 3302
DB Schema Version: 1608

[carpenox]

This is currently not a built in feature for Vicidial.

[mflorell]

I have a plan for a framework for adding 2FA for admin users(email and phone-call-audio), but it is currently sitting in our unfunded development list.

Were you wanting 2FA for only Admin web users, or also for VICIdial Agent Screen web users?

[carpenox]

active feature now @ramiz

[ramizuabhalim]

Hi Carpenox,

Need to upgrade the SVN is it?

Hi Matt,

Actually my plan just 2fa for login ssh only. I resolved using the google authentication to login on server.
However, for the web agent and admin, is better we got that feature.

[ramizuabhalim]

Hi Carpenox,

yes I saw it in latest SVN version 3414.

Thank You.

[ramizuabhalim]

Hi Carpenox,

yes I saw it in latest SVN version 3414.

Thank You.

[ramizuabhalim]

Hi Matt,

I have issue to configure the 2FA on the admin level.

I got this error :

Two-Factor-Authentication
Your User account is not configured for Two-Factor-Authentication. Please contact your system administrator.

How can i implement the 2FA on the vicibox?


Version: 2.14b0.5
SVN Version: 3414
DB Schema Version: 1628

[mflorell]

Did you read this entire document and follow the instructions to set it up and configure it properly?
http://vicidial.org/docs/2FA_TWO_FACTOR ... CATION.txt

[ramizuabhalim]

Hi Matt,

Yes, I have read that one. For the the user modify I was change on the database level instead of the change from admin page because I cannot see the enable the 2FA on the admin page at user modify. Now it works!! Thanks a lot.

I have a question, this 2FA we cannot implement on the specific user group right?

[mflorell]

2FA is only able to be enabled system-wide, with a User override option at the user level only.

[ramizuabhalim]

Hi Matt,

Noted with that.

Thank you so much

[ramizuabhalim]

Hi Matt,

I just notice on modify user for "Two Factor Auth Override" is not working.
Over there just have 2 option "NOT_ACTIVE and DISABLED".

Does i have missed configuration or how ya?

Any Advise..


Thank You.

[carpenox]

I will write up an article explaining step by step how to get this working

[carpenox]

Actually Matt he's right, enabled doesn't show as an option and even if you set it manually thru mysql it still says:

Two-Factor-Authentication
Your User account is not configured for Two-Factor-Authentication. Please contact your system administrator.

And locks you out of the system, I'll submit a ticket to mantis

[ramizuabhalim]

Hi Carpenox,

Thank you for your effort.

Yes, we are looking Matt and team to give some update for this issue.

Hopefully, they will fix and reply it here.

[mflorell]

The user setting is only an override, and it is only used to DISABLE the 2FA features. It is NOT meant to enable them on a per-user basis. When you enable 2FA in System Settings, it is enabled for all users on the system.

I just tested two systems that have 2FA active on them and it works just fine for me. We also have several other hosted clients using it without any issues.

[carpenox]

This occurs no matter what:

Two-Factor-Authentication
Your User account is not configured for Two-Factor-Authentication. Please contact your system administrator.

And you get locked out. Settings applied are 1 hour and a stings container with the info below:

auth_code_expire_minutes => 30
auth_code_attempts => 3
auth_code_length => 6
phone_auth => YES
phone_prefix => 91
phone_server_ip => 10.10.10.15
phone_cid_number => 7865551212
phone_message_override => 2FA_say_auth_code

Admin user set to disabled but still I'm locked out with above message.... What am I doing wrong?

[mflorell]

That message shows up if the user you are logged in as does not have a phone number and email filled in within the User Modify screen.

[carpenox]

Ah ok ty, duh

[dspaan]

I resolved using the google authentication to login on server.

Can you elaborate what you mean by this? I'm also looking for a method to use 2FA for agents to login.

[carpenox]

here you go bro:

https://dialer.one/how-to-setup-two-fac ... al-system/

Chris

[kashyapking]

Nice one! Helpful to setup 2FA.