ghmer / tiny-mfa-plugin Goto Github PK

Hello Mario - this IIQ MFA plugin is fantastic! Excellent work!

I did discover an issue in testing that I wanted to pass along. This may be specific to Microsoft SQL Server. The validation of MFA attempts fails consistently and prevents testing and activation of any MFA tokens (see below).

In catalina.out, the following is logged:

2020-09-11T10:42:18,752 ERROR ajp-nio-8009-exec-2 whisperedshouts.identityiq.rest.TinyMfaService:173 - com.microsoft.sqlserver.jdbc.SQLServerException: Invalid column name 'false'.
2020-09-11T10:42:18,752  WARN ajp-nio-8009-exec-2 whisperedshouts.identityiq.rest.TinyMfaService:194 - number attempts (16) exceeded limit 15 for identity username

In a SQL Server trace, a query like the following is being executed:

SELECT COUNT(*) FROM MFA_VALIDATION_ATTEMPTS WHERE CTS = @P0 and ACCOUNT_NAME = @P1 and SUCCEEDED = false,N'@P0 nvarchar(4000),@P1 bigint',N'username',1599825031

I believe the issue relates to "false" being a reserved word in SQL Server (SUCCEEDED = false); I believe TinyMfa would need to send this boolean value in the query as an integer (0 or 1) instead of true or false (i.e. SUCCEEDED = 0). It may also work if 'true' or 'false' are single-quoted but I suspect converting to 0/1 is the shorter path to resolution.

Environment details:
IIQ: 8.0p2
Java: openjdk-1.8.0.262
Database: Microsoft SQL Server 2017

Let me know if this all makes sense and if there is anything I can do to assist with remediation. Disclaimer: I am not very familiar with Java.

Thank you in advance and keep up the great work!
-N

I can't find the latest version for the tiny-mfa-plugin.
I install source code but not create QRcode
Can you provide me the latest version, newer than 1.9
Thanks you