Henrik Schack
Forum Replies Created
-
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHello again
I think I’ve found the problem and perhaps a solution.
You have the stop-spammer plugin installed.
On the options page for this plugin one of the first settings you’ll find is :Check credentials on all login attempts:
Normally the plugin checks for spammers before WordPress can try to log in a user. If you check this box, every attempt to login will be tested for a valid user. This may allow a hacker to guess your user id and password by making thousands of attempts to login. This is turned on initially to prevent you from being locked out of your own blog, but should be unchecked after you verify that the plugin does not think you are a spammer.My guess is you haven’t removed this checkmark yet ?
If this is the case, here is what’s happening:
The stop-spammers plugin validated your credentials including the google authenticator code just before your actual login is performed, this triggers the man-in-the middle protection in my plugin, and is the reason you can’t login.Would you try removing the mentioned checkmark, and give it another try ?
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHi again
Would it be possible to try disabling your stopspammers plugin ?
http://wordpress.org/plugins/stop-spammer-registrations-plugin/According to the description of the plugin it appears to be manipulating the loginflow somehow.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allHi
This need to re-generate secret is highly unusual, I’ve been running with the secret I created during development of the first version of my plugin.I would really like to take a look at your list of installed plugins.
Best regards
Henrik SchackForum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allI’m starting to feel a bit clueless.
Did you or your webhost install an app firewall recently ? I see you run nginx ad webserver, if it’s nginx-naxsi configured for at “normal” WordPress it would probably not like the added inputfield on the loginpage.Would you mind sending me a list of your installed plugins ?
You can email it to henrik at schack dot dkI have to get some sleep, it’s 2:45 AM here in Denmark and I’ve been up for 24 hours by now.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allOh wait, I can see your server time in the HTTP headers from your server.
Lets take a look at the time on your phone instead.I don’t know how you people in the US get accurate time on your phone, but I guess the minute count should match what you can see on http://www.unixtimestamp.com/index.php
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allLets start with the servertime
FTP this snippet the root of your blog :
<?php
echo time();
?>Hit it and compare to current timestamp output from : http://www.unixtimestamp.com/index.php
The numbers should be really close to each other.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allDid you have success with the other plugin ?
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allWhat’s the outcome ?
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allYes I don’t delete the plugin settings during uninstall.
If you want a new secret you have to hit the button that generates a new secret and scan it.
Ohh and remember to save your userprofile settings, else you’ll end up with one secret in your phone and another secret stored in WordPress, that wont log you in.Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allDid you get up and running with the other plugin ?
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allYes but that only contains the secret so that it can be setup in your phone. In my next release the QRcode will be generated by Javascript included in the plugin.
The code that determines if the number you enter is right or wrong uses the secret and current time.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allThere is no Google API being used, only time and your secret is used to calculate the code.
The reason I’m persistent about time problems is that these are the only actual login problem I’ve seen with users since I released the first version
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allYou don’t really reply to my questions regarding timesettings, so it’s pretty hard to narrow in on the problem.
But I see you installed the wp-google-authenticator, guess we can close this ticket then.
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allDo you want me to help ? Or just blame me for your problem ?
Forum: Plugins
In reply to: [Google Authenticator] Latest Version Not working – at allWell, I’m running the exact same code as you and it’s working perfectly, and you’re the first one of several thousands upgrading over the last week having a problem (I’ve heard about)
Forgive me, but it doesn’t sound like there is a problem with the plugin, did you check the time on your phone as well ?The webhosts you mention do they provide accurate time ?