Two-Factor Authentication

[entrepre7]

Editing. Figured out.

[lesliekirk]

It would be nice to know what issue you ran into and how you fixed it. I suspect it's going to happen to a lot more people.

[ILoveHostasaurus]

I am using a YubiKey. About 20-25% of the times I attempt to log in, I get the error screen shown in the attached .jpg after I touch the key to generate the code. I retry from this error screen, and I always get in on the second attempt. Any idea why I'm getting this odd error (I only have one YubiKey, so it can't be that I'm using the incorrect one) and why the failure rate on the first attempt with the YubiKey is so high?

Todd, any chance something else could have inserted text into the fill-in box before you touched the yubikey? Only reason I ask is because the Yubikey, when using Yubicloud mode, acts as a keyboard and "types" your one time password for you. If a browser, or even the real keyboard, accidentally inserted even a space in the box, it would break the attempt.

[oliverands]

Todd, any chance something else could have inserted text into the fill-in box before you touched the yubikey? Only reason I ask is because the Yubikey, when using Yubicloud mode, acts as a keyboard and "types" your one time password for you. If a browser, or even the real keyboard, accidentally inserted even a space in the box, it would break the attempt.

No, that's not it, sorry. If there were something in the box, there would be a dot there. There's nothing in the box and the cursor is not even active there. I touch the YubiKey, it types the code in the box, and then it gives the error. Again, it doesn't happen all the time. And I can't reliably reproduce it. It's very odd. But it doesn't seem to be improving. In the last week, for the first time, I've had multiple failures. In the past, it's just been one and then the code takes on the next page. This week I've had two or three failures in a row before the code takes. Most of the time, there's no problem.

For what it's worth, I'm using the Yubikey Nano, USB-A.

[ILoveHostasaurus]

Might be worth trying WebAuth mode instead of Yubicloud mode; the Nano supports both, but gets a bit more complicated if you're also accessing the admin from a mobile device; I'm not sure which browsers support that on mobile + NFC + ios/android combos.

[Rick Wilson]

I'm never surprised that people don't read emails

[Bruce - PhosphorMedia]

Windows 10, version 1803.

I can't reliably reproduce it myself. But it happens one out of every four or five login attempts for me.

I run into this when I don't notice that the browser autofilled the entry...might be the issus.

[oliverands]

I run into this when I don't notice that the browser autofilled the entry...might be the issus.

I don't think that's the issue I'm having. Chrome autofills for me. I can see dots in the input field. I need to delete them before touching the YubiKey. Firefox doesn't autofill. There are no dots in the field.

Usually it's just one error, and when I retry it works. But the other day I had so many failed attempts I got locked out. I tried rebooting my computer, and I was able to get in on the first attempt after the reboot. Not sure if it was just luck or if the reboot reset something with the USB key.