2fa not working

[ronniekilel]

I have enabled 2fa on a user but unable to login

[Satish04]

Hi ronniekilel,

If a user cannot log in after enabling two-factor authentication, ensure that they have entered both their password and second factor correctly.
Make sure the authentication method for 2FA is set up correctly. After validationg the setting, if the issue persists consider resetting the user's 2FA settings.

Hope this helps.!

Regards,
Satish

[shuff]

To use two-factor authentication (2FA) with Nimble Storage, you need to ensure that certain prerequisites are met. These include having a Service Account, which is a proxy user that authenticates and authorizes LDAP users. The Service Account LDAP username is the full bind DN and it requires read permission for the user and group subtrees. The parameters ldap-service-account and ldap-service-account-password must be set to configure the Service Account. The ldap-2FA-cert-field setauthparam parameter should point to where the User’s Id lives in their certificate. It can either be in the Subject or Subject Alternative Name field. The ldap-2FA-object-attr setauthparam parameter points to where the Users's Id lives in their LDAP Object. The Root CA and Intermediate Root CA certificates for CACs must be imported to the storage system. The storage system administrators with the super role can import certificate with the CLI command: importcert cac -ca stdin. The user computers must have a CAC reader, such as an external USB smart card reader or an internal reader. A CAC reader driver or middleware must be present. OpenSC Libraries and utilities must be present. Linux distribution comes with OpenSC libraries installed by default. For Windows distribution, install OpenSC libraries and utilities from https://github.com/OpenSC/OpenSC/releases. The user must have their CAC physically available when logging in to the storage system and must know the PIN for their CAC.

[DaveOb]

Check the time is not skewed on the array.Your phone is most likely using the carrier to keep time in sync if the array is not syncing with ntp time drift will effect logon.