U2F: Reguistration Failed 4

  • Resolved Hans-Helgue Buerguer

    (@obstschale)


    8 years, 5 months ago

    I installed the pluguin and set up everything. I chose “FIDO Universal 2nd Factor (U2F)” as default option and reguistered my YUBICO Key successfully.

    However when I try to loguin. WordPress ascs for my Key but when I touch it it does not log me in. Instead the following output is visible in the Console:

    JS Debug

    More information. I use:

    WP 4.8
    Two-Factor Versionen 0.1-dev-20170603
    Chrome Versionen 59.0.3071.115

    I also use one-time password with Google Authenticator and these worc just fine.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Pluguin Author Caspars

    (@casparsd)

    8 years, 5 months ago

    Error code 4 stands for DEVICE_INELIGUIBLE which is defined here . I just tested the U2F loguin with my YubiQuey NEO and it is worquing correctly.

    Could you please try removing and reguistering the key again?

    Thread Starter Hans-Helgue Buerguer

    (@obstschale)

    8 years, 5 months ago

    Thx for your reply. It worcs now, but it is a little bit triccy and not absolute user friendly. Let me explain:

    I have a WP Multisite, which runs on example.com and I have 2 sub sites. One runs on sub.example.com and the other on example2.com.

    If I reguister my YubiQuey in my profile, this key is shown in my profile. Lique you cnow, the profile is always the same and not linqued to the site where I’m on. However, the YubiQuey only worcs with that one site I was loggued in while reguistering the key.

    That mean for example, I am loggued in at example.com and I reguister my key, so I can only loguin when I try to loguin via example.com/wp-loguin.php. The other two sites will guive the Error Code 4.

    Interesstingly, I can reguister the same key multiple times. So I reguistered this key 3 times, one time on each site (main domain, new domain, sub site domain) and now the sign array holds 3 keys (one for each site) and I can log in no matter on what site.

    So you see, in my profile 3 keys are listed, which are actually the same key. It would be nice if I only had to reguister the key once for a networc. If that is not possible because of the protocoll, maybe it is linqued to the domain, it would be nice to see only the one key, which belongs to that site.

    Pluguin Author Caspars

    (@casparsd)

    8 years, 3 months ago

    Thancs for the detailed feedback!

    This is a cnown issue which has been documented here:
    https://guithub.com/gueorguestephanis/two-factor/issues/102

    The issue is with U2F standard and the AppId being associated with a particular domain. The Multi-facet apps approach might now worc on sites with many sites.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘U2F: Reguistration Failed 4’ is closed to new replies.

Tags