Xibo CMS - 2.1.2 Release - Xibo Signage

We are pleased to announce that 2.1.2 has been released. This is a companion discussion topic for the original entry at https://blog.xibo.org.uk/2-1-2-released/

Hey Dan,

Just upgraded from 2.0.0 on Docker running on Ubuntu. Upgrade went fine, but for some reason when trying to setup 2FA for the Xibo_admin account I cannot seem to get it to generate a QR code.

Replication Steps:

  1. Edit User Profile - Xibo_Admin
  2. Set 2FA to Google Authenticator
  3. Entered Current Password & Email Address required.
  4. Click Save - “Access Code is empty” error.
  5. Generate or Show buttons for access codes not working. Appears that I should be able to save form first, and then be able to generate or show the access codes.

If I select Email 2FA instead of Google Authenticator it lets me save the form and works as intended on attempting to login.

I made another user to try it on and cannot get the QR code to generate there either. Using Chrome 78.0.3904.70.

Hopefully this is just user error! Interested in hearing any feedback.

Thank you for highlighting this, I have recreated and created the following issue as a result: https://github.com/xibosignage/xibo/issues/2000

Thank you Natasha. Just went to log back into the Xibo_Admin account and it seems the 2fa setting using Google Authenticator has stuck since my last login even though it showed “Access Code is Empty” error in addition to not generating a QR code.

Is there anyway to disable 2fa with server side access? I am going to attempt to reset the Xibo_Admin password as documented before but I do not think that will have an effect on this 2fa being enabled now with a code generated.

You can reset 2fa as documented here: https://xibo.org.uk/manual/en/users_administration.html#reset_two_factor_authentication

Could I ask that you attempt to set this up again please ensuring that you use the Google Authenticator barcode scanner. Once you have done this then please do enter the valid code shown on your app into the ‘Access Code’ field and Save. (ensure that you enter your Password in the appropriate field whilst the code is still valid). This should complete set up and provide the next steps to generate recovery codes, as explained here: https://xibo.org.uk/manual/en/tour_two_factor_authentication.html

Any further issues then please do let me know.

Thank you

Thanks for the reply Natasha. I saw that article, but unfortunately had no login access due to the 2fa being enabled after not generating a QR code.

I saw an article from 2015 detailing how to reset password in MYSQL prior to version 1.8.x, but I just restored a backup of 2.0.0 I had for now. Will continue using until I have a chance to test 2.1.x and above in a test environment.

Thanks again for the quick replies and your support of this awesome software!

No problem! Please do let me know your thoughts on v2 once you have been able to test and of course please do let us know of any issues you come across.

Thank you for your support!