On Sun, Jan 2, 2022, 21:55 Bruce Cheng <[email protected]> wrote: > Hi, > > I current use Apache Guacamole version 1.3.0 with Mysql+LDAP( Active > Directory)+Totp successfully, I config TOTP with the following settings in > /etc/guacamole/guacamole.properties > > # TOTP properties > totp-issuer: MYCLOUD > #totp-digits: 8 > totp-digits: 6 > totp-period: 30 > totp-mode: sha256 > > When I change the value of totp-digits from 6 to 8 and restart tomcat, I > scan the first QRcode via my mobile, My authenticator app only showed 6 > digits but not 8 digits. I also saw the web page show "enter the 8-digit > authentication code ....". Of course, it was shown as a failure. > > When I remarked those settings (except " totp-issuer "), I could sign on > it. > > May I know if this is the bug or what kind of settings I should use? >
It's not a bug - not all authenticator apps support these settings, and some will silently ignore them. Unless you have confirmed that your authenticator app supports these settings, the correct settings to use on the Guacamole side are the defaults. - Mike
