• Resolved Reiner030

    (@reiner030)


    Hello,

    when i check TOTP in setup page it’s always fine/same as on my mobile with GoogleAuthenticator app.

    But when I activate OTP and try to login I got

    • normal login page
    • OTP question page
    • login page with
      ERROR: The username or password you entered is
      incorrect. Lost your password?

      and no additon errors.log entries.

    I have

    • Two Factor Authentication 1.1.15 installed an active
    • Wordfence Security 6.0.3 installed and active.
      When deactivating it I while TFA was active I got then errors “wrong password for user …”.
      But after disabling OTP and re-enabling it it give the same error message as first written.
    • JetPack 3.5.3 installed for testing but not activated.
    • WP Google Authenticator 1.1.0 installed for testing before this plugin but deactivated.
    • PHP 5.5.9-1ubuntu4.9 with php5-mcrypt, php5-xsl, php5-xmlrpc

    Bests

    Reiner

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    Obvious question, but – are you sure your password was correct?

    TFA doesn’t get involved in username/password checking – under the hood, what the TFA plugin does is add an extra field to the form. But, it only gets to check that field *after* WP’s normal username/password checks take place. If those checks fail, then the TFA plugin’s code doesn’t even get run.

    David

    Thread Starter Reiner030

    (@reiner030)

    Hello David,

    yes… I use LastPass, so everytime the same correct password is used.
    Is there some way so that I can debug / log the check for you ?

    Bests

    Reiner

    Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    So, if you…

    1) Attempt to log in

    2) De-activate TFA (you can do this by re-naming the TFA directory in wp-content/plugins)

    3) Attempt to log in again

    Do you get a different result?

    David

    Thread Starter Reiner030

    (@reiner030)

    weird, now its working fine…
    Perhaps there was some wrong content in PHPSession stored or so.

    But thanks for your support.

    Reiner

    I’m getting the same error as @reiner030 on WP 4.3.1 even with all other plugins disabled.

    Also on the setup page it doesn’t display a QR code, only the code number.

    Plugin Author David Anderson / Team Updraft

    (@davidanderson)

    OK, sorry. In any case it turns out this was due to a bit of bad code in my .htaccess file causing some mixed content warnings. Now your plugin is working great.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘login page broken?’ is closed to new replies.