No 2fa option in SoGo 5.3.0 anymore?

abyss02

Hi
i just updated my mailcow-server and now i have sogo 5.3.0 - but there is no prompt for the 2fa code anymore and i do not find how to activate 2fa in the sogo settings …

Any hints?

Regards,
A.

abyss02

Normally, the 2fa option was here …

abyss02

Found this on https://www.sogo.nu/files/docs/SOGoInstallationGuide.html#_sogo_configuration_summary

abyss02

Can anyone confirm this issue or is it just me?

abyss02

Bump … Please: Can anyone confirm this issue or is it just me?

accolon

I don’t see the 2FA option either, but since I never used it, I can’t confirm that it was there in the first place…

MAGIC

Seems SOGo introduced a bug…

SouIsAs

I can confirm, same issue for me. I previously had enabled 2fa already, and after the update to 5.3.0 there is no longer the 2fa prompt, and just like in your screenshot the 2fa Option is missing….

I already tried to reset 2fa:
docker-compose exec -u sogo sogo-mailcow sogo-tool user-preferences set defaults user@domain.tld SOGoTOTPEnabled '{"SOGoTOTPEnabled":0}'

But that didn’t do the trick.

MAGIC

Nothing we can do…
I created an issue on their ticket system https://www.sogo.nu/bugs/view.php?id=5438

moose

Hi folks,

as you see here the bug in SOGo 5.3.0 was fixed today

2021-12-06 13:24 francis Behoben in Version => 5.3.1

So now we only have to wait until SOGo 5.3.1 will be publish and becomes available in MailCow by update.sh …

Greetinx

moose

abyss02

Great News - Thanks a lot!

abyss02

Will 5.3.1 be pushed to the next mailcow update automatically?

moose

I really hope so!

As workaround I switched a reverse proxy with 2fa in between.

SouIsAs

After updating mailcow today (mailcow/sogo:1.104) the 2Fa option is back & working.
Thank you guys

moose

Great news, @SouIsAs - thanks for sharing!

I just updated mailcow. mailcow/sogo is v1.104 now, SOGo is still v5.3.0.

Anyway, 2FA works again although the fix was announced for SOGo v5.3.1

Sadly, all users have to re-initialize their 2FA settings. The old secret seams to be lost.

But, 2FA is working again as mentioned by @SouIsAs .

Greetinx,

moose

MaTy

Hi!
Does anyone know if v5.3.1 updates SOGo without necessity of 2FA reinitialization? I rolled back update to avoid 2FA keys loss (a lot of users) and I’ll wait for a solution without going throug that process again.

MAGIC

No, SoGO devs decided to change the salts and revoking all 2FA keys. nothing we can do.