+
Skip to content

DUO Authenticator returns a different number than Google and Microsoft for CloudStack's TOTP. #3

@daviftorres

Description

@daviftorres

When setting up TOTP 2FA for a user on CloudStack, the QRCode and the Seed work well on Google and Microsoft authenticators (same for my password manager) but it generates the wrong rolling PIN on DUO (appears to be out of sync).

Description

I consider it a bug because I can use the same QRCode or copy/paste the seed to 4 different apps and only DUO fails to produce the same PIN as all the others.

Expected Behavior

Expected to see the same rolling PIN on DUO as I see in other authenticator apps.

Actual Behavior

The rolling PIN appears to be out of sync and rarely works. Used to work in the first few seconds of generated (like the first 3 out of the 30 seconds).

Steps to Reproduce

Revealing the Seed : LGV3KCWF3AFZKYB4MWSZBH3R6YWBINJI
QRCode content: otpauth://totp/Company:username?secret=LGV3KCWF3AFZKYB4MWSZBH3R6YWBINJI&issuer=Company

Revealing the Seed : 3JLPXCKBHYR3CHE73T7FNGBS5CDMQRBG
QRCode content: otpauth://totp/Company:username?secret=3JLPXCKBHYR3CHE73T7FNGBS5CDMQRBG&issuer=Company

Workarounds

Use another authenticator app (Android and iOS).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载