TOTP + Android Tablet + Chrome = FAIL

[eunosm3 <m3...@gmail.com>]

I successfully set up my Guacamole gateway with TOTP today.  However, I
cannot use the Chrome browser on my Samsung / Android tablet because it did
not show the QR code for enrollment, and does not show the field for the
authentication code, either.

I don't know if anything can be done, because I do not know enough
(anything) about creating a webpage and how a browser displays the elements.

In short, just a PSA in case anyone else encounters a blank page after
moving the TOTP jar file in to the extensions directory.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: TOTP + Android Tablet + Chrome = FAIL

[Mike Jumper <mj...@apache.org>]

If the Guacamole deployment was visited by the browser in question
prior to installing the TOTP extension, it may also be called browser
cache. ;)

- Mike

On Sat, Feb 9, 2019 at 4:38 PM brian mullan <bm...@gmail.com> wrote:
>
> Its called PFM in technical circles (pure fr*ckin magic) :-)
>
>
> On Sat, Feb 9, 2019 at 7:20 PM Matthew Lawson <m3...@gmail.com> wrote:
>>
>> Well, never mind.  The field authentication field started appearing.  I'd like to tell you I changed a setting or something, but I didn't.  While I was testing how other browsers displayed desktop, I tried Chrome again for comparison.  And ... it worked fine.
>>
>> I don't know what happened.  Or why it works now.
>>
>>
>>
>> ~ML
>> On Feb 9, 2019, 5:06 PM -0500, Nick Couchman <vn...@apache.org>, wrote:
>>
>> On Sat, Feb 9, 2019 at 4:57 PM eunosm3 <m3...@gmail.com> wrote:
>>>
>>> I successfully set up my Guacamole gateway with TOTP today.  However, I
>>> cannot use the Chrome browser on my Samsung / Android tablet because it did
>>> not show the QR code for enrollment, and does not show the field for the
>>> authentication code, either.
>>
>>
>> What did it show?  How did it behave?  Did you get an error?
>>
>>>
>>>
>>> I don't know if anything can be done, because I do not know enough
>>> (anything) about creating a webpage and how a browser displays the elements.
>>
>>
>> We might be able to help, but more detail will be needed.
>>
>>>
>>>
>>> In short, just a PSA in case anyone else encounters a blank page after
>>> moving the TOTP jar file in to the extensions directory.
>>>
>>
>> Does the user you're logging in as have permissions to manage their own account (e.g. change password)?  Does it work on other browsers or devices, but just not on Android/Chrome?  Does it work if you enroll on another device and then log in from the tablet?
>>
>> -Nick

Re: TOTP + Android Tablet + Chrome = FAIL

[brian mullan <bm...@gmail.com>]

Its called PFM in technical circles (pure fr*ckin magic) :-)


On Sat, Feb 9, 2019 at 7:20 PM Matthew Lawson <m3...@gmail.com>
wrote:

> Well, never mind.  The field authentication field started appearing.  I'd
> like to tell you I changed a setting or something, but I didn't.  While I
> was testing how other browsers displayed desktop, I tried Chrome again for
> comparison.  And ... it worked fine.
>
> I don't know what happened.  Or why it works now.
>
>
>
> ~ML
> On Feb 9, 2019, 5:06 PM -0500, Nick Couchman <vn...@apache.org>, wrote:
>
> On Sat, Feb 9, 2019 at 4:57 PM eunosm3 <m3...@gmail.com> wrote:
>
>> I successfully set up my Guacamole gateway with TOTP today.  However, I
>> cannot use the Chrome browser on my Samsung / Android tablet because it
>> did
>> not show the QR code for enrollment, and does not show the field for the
>> authentication code, either.
>>
>
> What did it show?  How did it behave?  Did you get an error?
>
>
>>
>> I don't know if anything can be done, because I do not know enough
>> (anything) about creating a webpage and how a browser displays the
>> elements.
>>
>
> We might be able to help, but more detail will be needed.
>
>
>>
>> In short, just a PSA in case anyone else encounters a blank page after
>> moving the TOTP jar file in to the extensions directory.
>>
>>
> Does the user you're logging in as have permissions to manage their own
> account (e.g. change password)?  Does it work on other browsers or devices,
> but just not on Android/Chrome?  Does it work if you enroll on another
> device and then log in from the tablet?
>
> -Nick
>
>

Re: TOTP + Android Tablet + Chrome = FAIL

[Matthew Lawson <m3...@gmail.com>]

Well, never mind.  The field authentication field started appearing.  I'd like to tell you I changed a setting or something, but I didn't.  While I was testing how other browsers displayed desktop, I tried Chrome again for comparison.  And ... it worked fine.

I don't know what happened.  Or why it works now.



~ML
On Feb 9, 2019, 5:06 PM -0500, Nick Couchman <vn...@apache.org>, wrote:
> On Sat, Feb 9, 2019 at 4:57 PM eunosm3 <m3...@gmail.com> wrote:
> > > I successfully set up my Guacamole gateway with TOTP today.  However, I
> > > cannot use the Chrome browser on my Samsung / Android tablet because it did
> > > not show the QR code for enrollment, and does not show the field for the
> > > authentication code, either.
> >
> > What did it show?  How did it behave?  Did you get an error?
> >
> > >
> > > I don't know if anything can be done, because I do not know enough
> > > (anything) about creating a webpage and how a browser displays the elements.
> >
> > We might be able to help, but more detail will be needed.
> >
> > >
> > > In short, just a PSA in case anyone else encounters a blank page after
> > > moving the TOTP jar file in to the extensions directory.
> > >
> >
> > Does the user you're logging in as have permissions to manage their own account (e.g. change password)?  Does it work on other browsers or devices, but just not on Android/Chrome?  Does it work if you enroll on another device and then log in from the tablet?
> >
> > -Nick

Re: TOTP + Android Tablet + Chrome = FAIL

[Matthew Lawson <m3...@gmail.com>]

It showed the first line or two of text, which, iirc, is something like
"Your account has been enabled for 2FA".  It did not show the QR code, or
the field for the resulting authentication code further down on the page.
It only showed the 'Proceed' or 'Next' button, or whatever it is labeled.
Obviously, if I pressed the button, the webpage told me the authentication
failed.

The user (me) does have permissions to change his password. The process
went fine, in fact, when I switched to Chrome on a MacBook, which I used it
to complete the initial setup.  Also, I can log out and log back in without
issue on the MacBook.

I cannot log into Guacamole from the tablet using Chrome with TOTP active
because the field for the authentication code does not show up.  However, I
can use Opera to log in just fine.  It renders the authentication code
field just fine.

 The tablet is an older Galaxy Tab Pro running Android 4.4.2.  Chrome is
the latest version available to 4.4.2.

Do you need more information?

On Sat, Feb 9, 2019 at 10:06 PM Nick Couchman <vn...@apache.org> wrote:

> On Sat, Feb 9, 2019 at 4:57 PM eunosm3 <m3...@gmail.com> wrote:
>
>> I successfully set up my Guacamole gateway with TOTP today.  However, I
>> cannot use the Chrome browser on my Samsung / Android tablet because it
>> did
>> not show the QR code for enrollment, and does not show the field for the
>> authentication code, either.
>>
>
> What did it show?  How did it behave?  Did you get an error?
>
>
>>
>> I don't know if anything can be done, because I do not know enough
>> (anything) about creating a webpage and how a browser displays the
>> elements.
>>
>
> We might be able to help, but more detail will be needed.
>
>
>>
>> In short, just a PSA in case anyone else encounters a blank page after
>> moving the TOTP jar file in to the extensions directory.
>>
>>
> Does the user you're logging in as have permissions to manage their own
> account (e.g. change password)?  Does it work on other browsers or devices,
> but just not on Android/Chrome?  Does it work if you enroll on another
> device and then log in from the tablet?
>
> -Nick
>

Re: TOTP + Android Tablet + Chrome = FAIL

[Nick Couchman <vn...@apache.org>]

On Sat, Feb 9, 2019 at 4:57 PM eunosm3 <m3...@gmail.com> wrote:

> I successfully set up my Guacamole gateway with TOTP today.  However, I
> cannot use the Chrome browser on my Samsung / Android tablet because it did
> not show the QR code for enrollment, and does not show the field for the
> authentication code, either.
>

What did it show?  How did it behave?  Did you get an error?


>
> I don't know if anything can be done, because I do not know enough
> (anything) about creating a webpage and how a browser displays the
> elements.
>

We might be able to help, but more detail will be needed.


>
> In short, just a PSA in case anyone else encounters a blank page after
> moving the TOTP jar file in to the extensions directory.
>
>
Does the user you're logging in as have permissions to manage their own
account (e.g. change password)?  Does it work on other browsers or devices,
but just not on Android/Chrome?  Does it work if you enroll on another
device and then log in from the tablet?

-Nick