Wrong TOTP password

257 views
Skip to first unread message

Trinh Van Quynh

unread,
Mar 2, 2014, 8:46:23 AM3/2/14
to rcdevs-t...@googlegroups.com
Hi,

I am using Google Authenticator for OTP client and test with "Test User Login" function.  I was successful with "I use Google Authenticator (Event-based)" mode but I am totally fail when I try to use " I use Google Authenticator (Time-based)" mode. The log as below:
I am very new to RCDevs. Please help to solve this problem.

Thank you in advance!

==============================
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] New openotpLogin SOAP request
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] > Username: tvquynh
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] > LDAP Password: xxxxxxxxxxxxx
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] > Client ID: OpenOTP
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] > Source IP: 172.16.0.3
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Registered openotpLogin request
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Resolved LDAP user: CN=Quynh\\, Trinh Van,OU=IT,OU=HLHV,DC=HLHVJOC,DC=LCA (cached)
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Resolved LDAP groups: hlhv-vietnamese-list,hlhv-union-member-list,administration-list,vpn-user-list,ict-service-team (cached)
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Started transaction lock for user
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 1 user mobiles: 909326xxxx
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 1 user emails: tvq...@domain.com
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 1 user certificates
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 27 user settings: LoginMode=LDAPOTP,OTPType=TOKEN,OTPLength=6,ChallengeMode=1,ChallengeTimeout=90,ChallengeLock=,OTPPrefix=,HOTPLookAheadWindow=25,TOTPTimeStep=30,TOTPTimeOffsetWindow=120,MOTPTimeOffsetWindow=120,OCRASuite=OCRA-1:HOTP-SHA1-6:QN06-T1M,SMSType=Normal,SMSMode=Ondemand,MailMode=Ondemand,LastOTPTime=300,ListChallengeMode=ShowID
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 5 user data: LoginCount,RejectCount,TokenType,TokenKey,TokenState
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Found 1 registered Tokens: TOTP
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] LDAP password Ok
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] OTP challenge required
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Started challenge session of ID bc2b2388927a4d2c valid for 90 seconds
[2014-03-02 15:25:33] [127.0.0.1] [OpenOTP_96EBD39A] Sent challenge response
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] New openotpChallenge SOAP request
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] > Username: tvquynh
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] > Session: bc2b2388927a4d2c
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] > OTP Password: xxxxxx
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] Registered openotpChallenge request
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] Found challenge session started 2014-03-02 20:25:33
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] Started transaction lock for user
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] Wrong TOTP password
[2014-03-02 15:25:49] [127.0.0.1] [OpenOTP_96EBD39A] Updated user data
[2014-03-02 15:25:51] [127.0.0.1] [OpenOTP_96EBD39A] Sent failure response
[2014-03-02 15:25:55] [127.0.0.1] [OpenOTP_A1940EBE] New openotpStatus SOAP request
[2014-03-02 15:25:55] [127.0.0.1] [OpenOTP_A1940EBE] Sent status response

===================================

Trinh Van Quynh

unread,
Mar 2, 2014, 1:26:34 PM3/2/14
to rcdevs-t...@googlegroups.com
Hi ,

Now it 's work.

Thanks alot.


--
You received this message because you are subscribed to a topic in the Google Groups "RCDevs Security Solutions - Technical" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rcdevs-technical/RQDe06wXYaU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rcdevs-technic...@googlegroups.com.
To post to this group, send email to rcdevs-t...@googlegroups.com.
Visit this group at http://groups.google.com/group/rcdevs-technical.
For more options, visit https://groups.google.com/groups/opt_out.



--
-----------------------------
Trịnh Văn Quynh
Phone: 093 269 5989
Yahoo ID: forex.nick

Administrators

unread,
Mar 3, 2014, 3:10:45 AM3/3/14
to rcdevs-t...@googlegroups.com
Generally this is wrong time on server or mobile.
Server should be configured on the correct timezone and use NTP time synchronisation.

Trinh Van Quynh

unread,
Mar 3, 2014, 3:58:36 AM3/3/14
to rcdevs-t...@googlegroups.com
Thanks so much. It working now.


--
You received this message because you are subscribed to a topic in the Google Groups "RCDevs Security Solutions - Technical" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rcdevs-technical/RQDe06wXYaU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rcdevs-technic...@googlegroups.com.
To post to this group, send email to rcdevs-t...@googlegroups.com.
Visit this group at http://groups.google.com/group/rcdevs-technical.
For more options, visit https://groups.google.com/groups/opt_out.

wafae...@gmail.com

unread,
Mar 13, 2014, 7:07:30 AM3/13/14
to rcdevs-t...@googlegroups.com
Hi, 

Can you tell me please what have you done to correct the problem? I have the same one and I have not found the solution yet.

Trinh Van Quynh

unread,
Mar 14, 2014, 8:19:01 AM3/14/14
to rcdevs-t...@googlegroups.com
Hi,

I use ntp on OTP server and configure my phone get time from network carrier.




--
You received this message because you are subscribed to a topic in the Google Groups "RCDevs Security Solutions - Technical" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rcdevs-technical/RQDe06wXYaU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rcdevs-technic...@googlegroups.com.
To post to this group, send email to rcdevs-t...@googlegroups.com.
Visit this group at http://groups.google.com/group/rcdevs-technical.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages