Comments (3)
I had to whitelist the 2FA-app (twofactor_totp in my case) for guests to get it working.
from guests.
This still is an issue for multiple twofactor apps. As guest, in https://cloud.nextcloud.com/settings/user/security one cannot create Backup-Codes, enable TOTP or add webauthn-Tokens. "Nextcloud notification" can be switched on but it is not used. So it seems that 2FA isn't available for Guest accounts at all, at least in NC25.
from guests.
If I enale 2FA for Guest accounts on first logon they get a message that 2FA is enabled for them but not configured and to get in contact with the admin user. For internal accounts this works fine as at this same point you are forced to setup 2FA for your account.
Environment: Nextcloud 27.1.2, PostgreSQL, PHP 8.1, Apache2 (running on Ubuntu)
Result: guest account is not able to setup 2FA
Expected result: guest account should be able to setup 2FA at this point. For NC local admin account I've setup it this way and new local accounts are forces to setup 2FA at first logon. I would expect this to work the same wat for guest accounts.
Steps to duplicate:
- Enable the Guest App
- NC> Administration> Guests:
- Enable "Limit guest access to an app's allowlist", add "twofactor_totp" and "twofactor_backupcodes". << mind with or without those you get the same messag at logon to nc as a guest.
- NC> Administration> Security:
- Two-factor authentication is enforced for all members of the following groups.: Add "guest_app". Mind that "admins" is also lised here for local admin accounts.
- Now share an folder with an email address and select "Invite guest" to let them create an account
- User receives the invite link. Create an account by adding the reuqested password.
- The login dialog now apprears, so login with teh guest email and password just set.
- Now the dialog appears on link https:///login/selectchallenge popping up "Twofactor authentication is enabled, but not configured for your account. Please contact yoiur admin for help".
- Only option the user now has is to click "dismiss login".
Now if you for NC> Administration> Security, remove "guest_app" from "Two-factor authentication is enforced for all members of the following groups." again and the logon as teh guest user Settings> Security also does not list the 2FA option which sloud be enabled by "Limit guest access to an app's allowlist" adding "twofactor_totp" and "twofactor_backupcodes" in the admin settings.
To add some context on the use case: We use the Sendent for Outlook plugin and would like to leverage sharing with guest accounts. For protecting shared data this requires 2FA for guest accounts.
from guests.
Related Issues (20)
- Guest user is a able to rename Groupfolders HOT 1
- Lack of upload permissions for guests breaks some apps HOT 2
- Email not sending when I create new Guests HOT 3
- Guests can't acces files HOT 5
- Guest can't access shared files if a "share_folder" is set HOT 1
- "New" button not disabled for guests HOT 4
- Hide Guest users from other registered users in Search contacts dropdown HOT 1
- Guests needs application system folders
- Guests App will not be compatible with NC29 in its current state
- `occ guests:list` execute return type exception
- Guests have no access to shared folders in NC28 HOT 4
- Guests cannot invite other guests inside their circle to planned meetings
- Unable to create and add files and folders HOT 12
- App restrictions in the admin UI don't wrap
- Deleted files do not show up in trashbin of guest users
- Guest users cannot upload files in their root folders even if they have quota HOT 1
- Shared Calenders for Guest Users HOT 1
- Custom permissions to disallow downloads doesn't allow files to be opened in readers
- Guests w/o password to permit auto-login via a link
- Convert existing users to guest users
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from guests.