Maldua's Zimbra OSE 2FA for ZCS FOSS 10.0.x is available.

[adrian.gibanel.btactic]

Maldua's Zimbra OSE 2FA Extension & Administration Zimlet.

Two-factor authentication adds an additional layer of security to your Zimbra login. Thanks to a third-party authenticator such as Google Authenticator Zimbra users are now required to enter a randomly generated code.

It is aimed at ZCS OSE 8.8.15, ZCS FOSS 9.x and ZCS FOSS 10.0.x.



Features:

• Integrated with Zimbra Webclient UI
• Includes QR support
• Basic 2FA
• Trusted devices
• Application specific passwords
• Scratch codes
• Network Edition binary compatibility upgrade

- You can find more information and releases at Zimbra OSE 2FA repo.
- Maldua's Zimbra OSE 2FA Zeta Alliance Gallery page just in case you want to rate it.
- You can send technical feedback and bugs on the Zimbra OSE 2FA Github issues page.
- Admin Zimlet translations are welcome at Zimbra OSE 2FA Github Pull requests page.

This is a completely different codebase than the well-known Zimbra Open Source Two Factor Authentication with PrivacyIDEA.

Enjoy!

[Klug]

Nice.

Thank you!

[zimbra900]

Will it run on zcs 10.0.4?

[adrian.gibanel.btactic]

Will it run on zcs 10.0.4?

Imanudin tested v0.6.0 on Zimbra 10 OSE and it worked for him.

v0.7.0 (the latest version) changes two Zimbra files so that QR addon is properly integrated. I have no idea if they are the same exact files in Zimbra 10.
If there is a problem with the automatic installation you can always revert those files thanks to the 2FAQR_COPY copies that are mentioned on v0.7.0 Additional notes.

Feedback about:

- Zimbra FOSS 9
- Zimbra FOSS 10

is welcome on the Zimbra OSE 2FA Github issues page.

[gianko]

Very good!
It only shows me the key and not the qr code image. Has the problem occurred to others?

(Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P44.)

[adrian.gibanel.btactic]

Very good!
It only shows me the key and not the qr code image. Has the problem occurred to others?

(Release 8.8.15_GA_3953.RHEL8_64_20200629025823 RHEL8_64 FOSS edition, Patch 8.8.15_P44.)

First of all it would be nice if you could open an issue about your specific problem so that we can deal with it there.

Just in case it's a problem for you I will answer here:

Assuming that you are using 0.7.0 version (and also never used 0.6.0 version) 8.8.15 should work out of the box. This means that you should see the QR image both in the Preferences page and in the login page when an user is created and forced to use 2FA.

I had never had feedback from a RHEL installation so this might be related to RHEL specific stuff such as SELinux.

It would be nice if you could run these commands:

Code: Select all

ls -lZ /opt/zimbra/jetty/webapps/zimbra/js/qrcode.js
ls -lZ /opt/zimbra/jetty/webapps/zimbra/js/TwoFactor_qr.js
ls -lZ /opt/zimbra/jetty/webapps/zimbra/public/TwoFactorSetup.jsp

so that I can write some chcon commands to fix the SELinux permissions.

Finally you might give a go about switching from a custom theme to the standard/default Zimbra theme and see if there is any difference.

[gianko]

I opened an issue.
Thanks!

[liverpoolfcfan]

@adrian.gibanel.btactic
I am testing the zimlet on a new zcs-8.8.15 P44 installation on Rocky 8. It looks great. Logging in normally with email/password prompts for a code, and works successfully.

However, I have created a test "Application Passcode" and I cannot login with that. Please correct me if I am doing something wrong but I am testing by entering my email/PASSCODE instead of email/password. I just get an error/unauthorized. If I try from SOAP the error returned is account.AUTH_FAILED

Should I not be able to login with userid/PASSCODE for clients that do not handle the 2FA token popup?

I did open an issue on GitHub too

[adrian.gibanel.btactic]

Please correct me if I am doing something wrong but I am testing by entering my email/PASSCODE instead of email/password. I just get an error/unauthorized. If I try from SOAP the error returned is account.AUTH_FAILED

I did open an issue on GitHub too

Sorry for the late reply. I was busy. I will reply on GitHub.

[adrian.gibanel.btactic]

v0.8.0 version is now available.

The main change is that ZCS FOSS 10.0.x is officially supported.

Enjoy !

Check latest releases here.