[GUACAMOLE-1146] TOTP authentication fails when totp-period is set

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.3.0
• Component/s: guacamole-auth-totp
• Environment: CentOS Linux release 7.8.2003 (Core)
• Assignee: Mike Jumper
• Reporter: Benjamin
• Created: 22/Jul/20 13:39
• Updated: 28/Oct/20 23:10
• Resolved: 28/Oct/20 23:10

Description

After configuring totp-period to 60 authenticating is failing.

When entering the 6digit code I receive the following error in the Guacamole WebUI:

Verification failed. Please try again.

After removing the variable from guacamole.properties and restarting tomcat everything started to work fine.

I am not able to see an error in the logs, it is actually reporting that everything is fine:

Jul 22 10:16:09 service server: 10:16:09.070 [http-bio-8180-exec-22] INFO o.a.g.r.auth.AuthenticationService - User "jerome" successfully authenticated from [37.228.140.239, 10.0.0.5].

Note: Users have the required permissions to update their passwords, it's working fine in my environment without configuring this.