Mesh Central

AdamF

This tool set is amazing. The branding and customization options are really nice. I want to setup 2fa for ALL users of the system. I want to force the users to enable 2fa. I put this in the config.json file, but it is still not prompting/forcing users to setup 2fa. Is anyone else using this?

      "passwordRequirements": {
        "min": 8,
        "max": 128,
        "upper": 1,
        "lower": 1,
        "numeric": 1,
        "nonalpha": 1,
        "reset": 90,
        "force2factor": true,
        "_skip2factor": "127.0.0.1,192.168.2.0/24",
        "oldPasswordBan": 5,
        "banCommonPasswords": false,
        "twoFactorTimeout": 300
}

notverypunny

@AdamF Just looking at the syntax, have you tried using 1 and 0 instead of true / false?

AdamF

@notverypunny said in Mesh Central:

@AdamF Just looking at the syntax, have you tried using 1 and 0 instead of true / false?

Good idea, but this is the direct from the manual. So I would assume that "true" is the correct value.

notverypunny

@AdamF Fair point

syko24

@AdamF said in Mesh Central:

@notverypunny said in Mesh Central:

@AdamF Just looking at the syntax, have you tried using 1 and 0 instead of true / false?

Good idea, but this is the direct from the manual. So I would assume that "true" is the correct value.

@Ylian posted a response to a similar issue on Reddit. Make sure the passwordrequirements section is inside the default domain section.

https://www.reddit.com/r/MeshCentral/comments/sct26v/having_trouble_with_force2factor_configjson_option/

AdamF

@syko24 said in Mesh Central:

@AdamF said in Mesh Central:

@notverypunny said in Mesh Central:

@AdamF Just looking at the syntax, have you tried using 1 and 0 instead of true / false?

Good idea, but this is the direct from the manual. So I would assume that "true" is the correct value.

@Ylian posted a response to a similar issue on Reddit. Make sure the passwordrequirements section is inside the default domain section.

https://www.reddit.com/r/MeshCentral/comments/sct26v/having_trouble_with_force2factor_configjson_option/

Hmm. It is inside the domain section, and the whole config file is valid JSON. At least it is valid JSON as far as an online validator is concerned. It's either still something wrong with my config, or is there another option that I am missing to enable this?

syko24

@AdamF said in Mesh Central:

@syko24 said in Mesh Central:

@AdamF said in Mesh Central:

@notverypunny said in Mesh Central:

@AdamF Just looking at the syntax, have you tried using 1 and 0 instead of true / false?

Good idea, but this is the direct from the manual. So I would assume that "true" is the correct value.

@Ylian posted a response to a similar issue on Reddit. Make sure the passwordrequirements section is inside the default domain section.

https://www.reddit.com/r/MeshCentral/comments/sct26v/having_trouble_with_force2factor_configjson_option/

Hmm. It is inside the domain section, and the whole config file is valid JSON. At least it is valid JSON as far as an online validator is concerned. It's either still something wrong with my config, or is there another option that I am missing to enable this?

Not sure what follows your passwordRequirements section, but maybe you need a comma after your last }

AdamF

@syko24 I didn't have a closing } in one of my sections so it was ignoring some of the config. Fixed.

Thanks!