Page 1 of 1

How to enable Authenticator App in community edition

Posted: Sun Mar 24, 2019 11:11 pm
by jbakuwel
Hi all,

How can I make 2FA authentication with an Authenticator App work with the Community Edition?

https://helpcenter.onlyoffice.com/guide ... ation.aspx

I don't have the choice "by authenticator app" in Portal Access.

kind regards,
Jan

Re: How to enable Authenticator App in community edition

Posted: Mon Aug 05, 2019 8:22 am
by Maxim
Hello jbakuwel!
is your Commniuty Edition updated to the lattest release?

Re: How to enable Authenticator App in community edition

Posted: Sun Aug 11, 2019 5:49 am
by jbakuwel
Hi Maxim,

Thanks for your reply.

So ... I tried updating the community edition running on a Debian Stretch server (deb packages). The first apt-get update resulted in a non-working OnlyOffice due to an issue with mono failing to upgrade. Those were easy to solve.

Then I tried updating OnlyOffice by:

root@o9:/etc/mono# apt-get install onlyoffice-communityserver onlyoffice-documentserver
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
onlyoffice-communityserver : Depends: elasticsearch (= 6.5.0) but it is not installable
onlyoffice-documentserver : Depends: nodejs (>= 8.0.0) but 6.17.1-1nodesource1 is to be installed
E: Unable to correct problems, you have held broken packages.

Then I downloaded the script from the OnlyOffice website and ran:

root@o9:/data/install/onlyoffice# bash install-Debian.sh -u true

This showed only one warning:

W: Conflicting distribution: http://download.mono-project.com/repo/debian stable-stretch/snapshots/5.20 InRelease (expected stable-stretch/snapshots/5.20 but got stretch)

which I don't consider a problem (but rather a bug in the mono repo / installer.

The script completed with:

Congratulations, the onlyoffice documentserver has been installed successfully!

So far, so good :-)

I ran another apt-get upgrade, which (once again?) upgraded OnlyOffice:

root@o9:/data/install/onlyoffice# apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following package was automatically installed and is no longer required:
libgconf2-4
Use 'apt autoremove' to remove it.
The following packages have been kept back:
elasticsearch
The following packages will be upgraded:
onlyoffice-documentserver
1 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Need to get 195 MB of archives.
After this operation, 982 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://download.onlyoffice.com/repo/debian squeeze/main amd64 onlyoffice-documentserver amd64 5.3.4-3 [195 MB]
....
....

which also completed successfully:

Congratulations, the onlyoffice documentserver has been installed successfully!


However, I've lost all access to OnlyOffice. The website shows:

Runtime Error
A runtime error has occurred

Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed (for security reasons).

Details: To enable the details of this specific error message to be viewable, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".

I've tried to set the customErrors tag in various places in onlyoffice/WebStudio/Web.config to no avail. Either I see "The requested URL /Default.aspx was not found on this server." or the page request times out.


Even though the use of OnlyOffice here is very small scale with just a few users; not having access after what I thought would be a trivial update process, is having quite an impact; we've come to rely on OnlyOffice for our documents.

Please advise.

kind regards,
Jan

Re: How to enable Authenticator App in community edition

Posted: Sun Aug 11, 2019 6:07 am
by jbakuwel
Hi Maxim,

A bit of additional information:

web.log shows:

2019-08-11 15:13:28,685 ERROR [5] ASC.Resources - Can not get resource from MailResource.resx for en-NZ: GetString(ProductName), MySql.Data.MySqlClient.MySqlException (0x80004005): Unable to connect to any of the specified MySQL hosts. ---> System.AggregateException: One or more errors occurred. (None of the discovered or specified addresses match the socket address family.) ---> System.ArgumentException: None of the discovered or specified addresses match the socket address family.

The MySQL server is running and I can confirm that the password configured in the following files for MySQL is the correct password (not changed since attempted upgrade):

ApiSystem/Web.config
Services/MailAggregator/ASC.Mail.EmlDownloader.exe.config
Services/TeamLabSvc/TeamLabSvc.exe.Config
Services/MailCleaner/ASC.Mail.StorageCleaner.exe.config
Services/MailWatchdog/ASC.Mail.Watchdog.Service.exe.config
WebStudio/web.connections.config
WebStudio/bin/ASC.Common.dll.config
WebStudio/bin/ASC.Web.Projects.dll.config
WebStudio/bin/ASC.Data.Storage.dll.config
WebStudio/bin/ASC.Core.Common.dll.config
WebStudio/Products/Projects/Test/App.config

kind regards,
Jan

Re: How to enable Authenticator App in community edition

Posted: Mon Aug 19, 2019 1:31 pm
by Andrew
Hello jbakuwel,

Here is an example of command to update Community Edition without mail server:

Code: Select all

bash opensource-install.sh -ims false -u true
Please check additional script parameters here .

Re: How to enable Authenticator App in community edition

Posted: Mon Aug 19, 2019 10:24 pm
by jbakuwel
Hi Maxim,

Thanks. I have indeed reverted to a snapshot backup of the VM and used the script (not apt-get update/upgrade/dist-upgrade) to update OnlyOffice.
2FA working beautifully. I do have a feature request though which is to enable the administrator to choose which user must use 2FA and which ones are getting a grace period or do not have to use 2FA.

Thanks for making the community edition available, it is much appreciated.

Jan

Re: How to enable Authenticator App in community edition

Posted: Tue Aug 27, 2019 7:44 am
by Andrew
jbakuwel wrote:
Mon Aug 19, 2019 10:24 pm
I do have a feature request though which is to enable the administrator to choose which user must use 2FA and which ones are getting a grace period or do not have to use 2FA.
Thank you for suggestion! Hope we can implement separate 2FA settings for different users on portal in future versions of ONLYOFFICE.