MFA slightly out of sync?

General questions relating to Joomla! 5.x.

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting.
Forum Post Assistant - If you are serious about wanting help, you should use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10
Post Reply
User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2631
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

MFA slightly out of sync?

Post by JAVesey » Tue Feb 27, 2024 10:45 am

I use MFA (verification code) with Google Authenticator.

In the past week, I’ve noticed that the code in Google Authenticator is only valid for about 15 of the expected 30secs. It’s as if my website is ahead of Authenticator by about that amount of time; I have only a small window of time after the code changes on Authenticator to enter it.

Two things have happened in the last week:
1. Joomla 5.0.2 —> 5.0.3 update (22.02.2024)
2. Server updated (PHP and database) (24.02.2024)

I can’t say whether the issue occurred after 1. above or not.

Server timezone = UTC, Website timezone = London. Essentially the same thing at the moment (both are currently = GMT). Changing Website timezone to UTC has no effect on the issue.

I use MFA and Google Authenicator to login to my hosting. These do not appear to be out of sync.

Most odd.

Anyone else? Ideas?
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28

User avatar
Per Yngve Berg
Joomla! Master
Joomla! Master
Posts: 30880
Joined: Mon Oct 27, 2008 9:27 pm
Location: Romerike, Norway

Re: MFA slightly out of sync?

Post by Per Yngve Berg » Tue Feb 27, 2024 12:54 pm

I would say that the clock on the server is off.

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2631
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: MFA slightly out of sync?

Post by JAVesey » Tue Feb 27, 2024 6:51 pm

Per Yngve Berg wrote:
Tue Feb 27, 2024 12:54 pm
I would say that the clock on the server is off.
Hosting company say it’s not…

Guess I’ll need to do more investigation :(
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2631
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: MFA slightly out of sync?

Post by JAVesey » Fri Mar 08, 2024 12:09 pm

quattro123123 wrote:
Fri Mar 08, 2024 12:03 pm
t seems like the problem you're encountering could be related to a time synchronisation discrepancy between your server and the Google Authenticator app. Given that there have been both a Joomla update from version 5.0.2 to 5.0.3 on the 22nd of February, 2024, and a server update involving PHP and the database on the 24th of February, 2024, either one (or both) of these updates might have contributed to the issue at hand.

Despite the server and website timezones being aligned (UTC and London, respectively, which are equivalent to GMT at the current time), the fact that changing the website timezone to UTC doesn't resolve the issue is intriguing. It's worth noting that your MFA and Google Authenticator setup for hosting login appears unaffected, suggesting that the problem is specific to the interaction between Joomla and Google Authenticator.
Thank you for this AI generated answer as your first post.

I’ve since concluded that the issue is at the server end.
John V
Cardiff, Wales, UK
Joomla 5.0.3 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.0.3 on XAMMP for OSX with PHP 8.2.4 and MariaDB 10.4.28


Post Reply

Return to “General Questions/New to Joomla! 5.x”