Installation

Two factor host name change

Two factor host name change

by frank picabia -
Number of replies: 1

Hi,

I setup the new webwork initially with a host/site name of webwork-dev and it allowed courses to be migrated there and some instructors started setting up their migrated courses for the winter term.

The two factor authenticator (google auth) still displays webwork-dev in the host name.  I went to accounts manager and it doesn't allow one to reset their own two factor on their own account.  This is what the course instructors would need to do for themselves to get the correct hostname showing in the authenticator.  I can't see a solution.

In reply to frank picabia

Re: Two factor host name change

by Glenn Rice -

Two factor authentication is certainly something that a user should never be able to reset for themself.  That would be a security vulnerability.  The system administrator will need to do that for the instructors.  There is a wwsh script bin/reset2fa that the system administrator can use to reset the OTP secret for a user.  Execute "wwsh ./bin/reset2fa courseId userId" from the /opt/webwork/webwork2 directory.

In the next release of WeBWorK there will be a page in the admin course that you can manage OTP secrets for users on.