Hi
The plugin is working fine.
Let’s try to locate where things break, did you try to disable your Genesis theme, and see if the problem persists?
Best reards
Henrik Schack
Thread Starter
bamajr
(@bamajr)
Yes… Disabled, but not uninstalled. Also, before wasting your time with a random issue, I’ve verified that at least 3 of my websites are having the same problem.
All three started having the problem, at the same time – after updating to the latest version, after updating to WordPress 3.8
All three have the same issue – the Google Authenticator code was working, prior to the update, and now, no longer works, even after deleting the plugin, via FTP, re-installing it, via WordPress Admin, regenerating the key and re-adding it to Google’s Authenticator app.
All three issue the same error:
ERROR: The Google Authenticator code is incorrect or has expired.
I would say it sounds like you have a time drift problem on your server or phone.
Did you check that, do you have a ntp daemon running on the server?
Thread Starter
bamajr
(@bamajr)
All of these have been on their same server for at least 6 months. They all worked until your most recent update.
Yes, I’ve tried checking the option for relaxing the time, within your plugin’s config (User Profiles).
Well, I’m running the exact same code as you and it’s working perfectly, and you’re the first one of several thousands upgrading over the last week having a problem (I’ve heard about)
Forgive me, but it doesn’t sound like there is a problem with the plugin, did you check the time on your phone as well ?
The webhosts you mention do they provide accurate time ?
Thread Starter
bamajr
(@bamajr)
Look, when something works, for as long as it did, then it quits working, after an update, I’m prone to believe the issue is in the update. I haven’t changed hosts, nor server configs since this plugin was working, till now, when they are not.
Do you want me to help ? Or just blame me for your problem ?
Thread Starter
bamajr
(@bamajr)
Hah… I was just getting ready to ask you the same thing 😉
You don’t really reply to my questions regarding timesettings, so it’s pretty hard to narrow in on the problem.
But I see you installed the wp-google-authenticator, guess we can close this ticket then.
Thread Starter
bamajr
(@bamajr)
I did install the other google authenticator plugin, on one website, but not on any of the others. I’m testing your theory of the issue, with a different plugin, as the Google API, used by both plugins, would be the same.
There is no Google API being used, only time and your secret is used to calculate the code.
The reason I’m persistent about time problems is that these are the only actual login problem I’ve seen with users since I released the first version
Thread Starter
bamajr
(@bamajr)
How is the QR Code Generated? Google Charts API, right?
Yes but that only contains the secret so that it can be setup in your phone. In my next release the QRcode will be generated by Javascript included in the plugin.
The code that determines if the number you enter is right or wrong uses the secret and current time.
Did you get up and running with the other plugin ?
Thread Starter
bamajr
(@bamajr)
Each time, I tried resetting the plugin, I scanned the QR Code. However, each time I deactivated the plugin, the same secret is automatically populated into the settings.
…and I am looking into the time issue. I just don’t know how to check it, exactly, on the server. I’m not aware of any way to do that, with WebSynthesis – so I have to find out.
