Maldua's Zimbra OSE 2FA for ZCS FOSS 10.0.x is available.

Ask questions about your setup or get help installing ZCS server (ZD section below).
Post Reply
User avatar
adrian.gibanel.btactic
Advanced member
Advanced member
Posts: 87
Joined: Thu Jan 30, 2014 11:13 am

Maldua's Zimbra OSE 2FA for ZCS FOSS 10.0.x is available.

Post by adrian.gibanel.btactic »

Maldua's Zimbra OSE 2FA Extension & Administration Zimlet.

Two-factor authentication adds an additional layer of security to your Zimbra login. Thanks to a third-party authenticator such as Google Authenticator Zimbra users are now required to enter a randomly generated code.

It is aimed at ZCS OSE 8.8.15, ZCS FOSS 9.x and ZCS FOSS 10.0.x.

Image

Features:
  • Integrated with Zimbra Webclient UI
  • Includes QR support
  • Basic 2FA
  • Trusted devices
  • Application specific passwords
  • Scratch codes
  • Network Edition binary compatibility upgrade
- You can find more information and releases at Zimbra OSE 2FA repo.
- Maldua's Zimbra OSE 2FA Zeta Alliance Gallery page just in case you want to rate it.
- You can send technical feedback and bugs on the Zimbra OSE 2FA Github issues page.
- Admin Zimlet translations are welcome at Zimbra OSE 2FA Github Pull requests page.

This is a completely different codebase than the well-known Zimbra Open Source Two Factor Authentication with PrivacyIDEA.

Enjoy!
Last edited by adrian.gibanel.btactic on Fri Jan 19, 2024 6:31 pm, edited 3 times in total.
Klug
Ambassador
Ambassador
Posts: 2726
Joined: Mon Dec 16, 2013 11:35 am
Location: France - Drôme
ZCS/ZD Version: All of them
Contact:

Re: Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by Klug »

Nice.

Thank you!
zimbra900
Posts: 27
Joined: Wed May 24, 2023 11:05 am
ZCS/ZD Version: 10.0.4 FOSS

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by zimbra900 »

👍👍

Will it run on zcs 10.0.4?
User avatar
adrian.gibanel.btactic
Advanced member
Advanced member
Posts: 87
Joined: Thu Jan 30, 2014 11:13 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by adrian.gibanel.btactic »

zimbra900 wrote: Sat Sep 30, 2023 12:55 am 👍👍

Will it run on zcs 10.0.4?
Imanudin tested v0.6.0 on Zimbra 10 OSE and it worked for him.

v0.7.0 (the latest version) changes two Zimbra files so that QR addon is properly integrated. I have no idea if they are the same exact files in Zimbra 10.
If there is a problem with the automatic installation you can always revert those files thanks to the 2FAQR_COPY copies that are mentioned on v0.7.0 Additional notes.

Feedback about:

- Zimbra FOSS 9
- Zimbra FOSS 10

is welcome on the Zimbra OSE 2FA Github issues page.
User avatar
gianko
Posts: 7
Joined: Fri Jun 19, 2020 3:08 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by gianko »

Very good!
It only shows me the key and not the qr code image. Has the problem occurred to others?

(Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P44.)
User avatar
adrian.gibanel.btactic
Advanced member
Advanced member
Posts: 87
Joined: Thu Jan 30, 2014 11:13 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by adrian.gibanel.btactic »

gianko wrote: Thu Nov 02, 2023 9:05 pm Very good!
It only shows me the key and not the qr code image. Has the problem occurred to others?

(Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P44.)
First of all it would be nice if you could open an issue about your specific problem so that we can deal with it there.

Just in case it's a problem for you I will answer here:

Assuming that you are using 0.7.0 version (and also never used 0.6.0 version) 8.8.15 should work out of the box. This means that you should see the QR image both in the Preferences page and in the login page when an user is created and forced to use 2FA.

I had never had feedback from a RHEL installation so this might be related to RHEL specific stuff such as SELinux.

It would be nice if you could run these commands:

Code: Select all

ls -lZ /opt/zimbra/jetty/webapps/zimbra/js/qrcode.js
ls -lZ /opt/zimbra/jetty/webapps/zimbra/js/TwoFactor_qr.js
ls -lZ /opt/zimbra/jetty/webapps/zimbra/public/TwoFactorSetup.jsp
so that I can write some chcon commands to fix the SELinux permissions.

Finally you might give a go about switching from a custom theme to the standard/default Zimbra theme and see if there is any difference.
User avatar
gianko
Posts: 7
Joined: Fri Jun 19, 2020 3:08 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by gianko »

liverpoolfcfan
Elite member
Elite member
Posts: 1085
Joined: Sat Sep 13, 2014 12:47 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by liverpoolfcfan »

@adrian.gibanel.btactic
I am testing the zimlet on a new zcs-8.8.15 P44 installation on Rocky 8. It looks great. Logging in normally with email/password prompts for a code, and works successfully.

However, I have created a test "Application Passcode" and I cannot login with that. Please correct me if I am doing something wrong but I am testing by entering my email/PASSCODE instead of email/password. I just get an error/unauthorized. If I try from SOAP the error returned is account.AUTH_FAILED

Should I not be able to login with userid/PASSCODE for clients that do not handle the 2FA token popup?

I did open an issue on GitHub too
User avatar
adrian.gibanel.btactic
Advanced member
Advanced member
Posts: 87
Joined: Thu Jan 30, 2014 11:13 am

Re: Maldua's Zimbra OSE 2FA for ZCS OSE 8.8.15 is available.

Post by adrian.gibanel.btactic »

liverpoolfcfan wrote: Tue Nov 21, 2023 11:27 am Please correct me if I am doing something wrong but I am testing by entering my email/PASSCODE instead of email/password. I just get an error/unauthorized. If I try from SOAP the error returned is account.AUTH_FAILED

I did open an issue on GitHub too
Sorry for the late reply. I was busy. I will reply on GitHub.
User avatar
adrian.gibanel.btactic
Advanced member
Advanced member
Posts: 87
Joined: Thu Jan 30, 2014 11:13 am

Re: Maldua's Zimbra OSE 2FA for ZCS FOSS 10.0.x is available.

Post by adrian.gibanel.btactic »

v0.8.0 version is now available.

The main change is that ZCS FOSS 10.0.x is officially supported.

Enjoy !

Check latest releases here.
Post Reply