WordPress.org

Ready to get started?Download WordPress

Forums

Google Authenticator
[resolved] Need a way to customize time drift (4 posts)

  1. chimericdream
    Member
    Posted 1 year ago #

    I have been using this plugin for awhile now, and love it. I have the +- 4min option turned on, but it looks like my web server has drifted _just_ over 4min from my phone's time. My phone's clock is synced with the national time service, so can't really do anything there. I manually edited the plugin to allow for a larger time drift (+- 10min), and I was able to log in.

    However, if/when the plugin updates, I will need to make these changes again. Ideally, I'd like to see a settings screen that gives the admin control over how much drift is allowable.

    In addition, I'd like it if the plugin showed the server time on the login screen (even if it's in a HTML comment). This would help troubleshoot login problems related to GAuth.

    http://wordpress.org/extend/plugins/google-authenticator/

  2. Henrik Schack
    Member
    Plugin Author

    Posted 1 year ago #

    Hi chimericdream

    I should get your webhost to install a NTP daemon on the server.
    This way your servers time will become accurate.

    Best regards
    Henrik Schack

  3. chimericdream
    Member
    Posted 1 year ago #

    I agree that is the best option, but it is not always possible (e.g. on a shared host) to have them install things, regardless of whether there are security or logical reasons to do so. In such cases, it would be nice if the end user could specify how large a time gap between phone and server they wanted to allow.

    If you have the plugin on GitHub or somewhere else public, I'd be happy to make the change myself and submit a pull request. I can fork the plugin and make my own customizations, but I'd rather have a version that is kept up to date with any changes to the way GAuth works.

  4. Henrik Schack
    Member
    Plugin Author

    Posted 1 year ago #

    Let's not treat the symptom but the cause.
    Email your webhosting support and have them install a NTP deamon, or otherwise provide accurate time on the server hosting your blog.
    If they don't like to have a NTP daemon running, running ntpdate once an hour would also solve the time drift problem.

    Best regards
    Henrik Schack

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.