multiotp icon indicating copy to clipboard operation
multiotp copied to clipboard

Problem Syntax Username from RDWeb - MultiOTP

Open 146junior opened this issue 1 year ago • 6 comments

Hi, I have a problem with the MultiOtp - RdWeb integration. It works well if I use the domain\name syntax in the domain Since in our domain we use the syntax domain\n.surname (initial of the name . surname) authentication does not occur by giving the wrong username or password message. How can I solve the problem? Thanks for your precious help

146junior avatar Feb 19 '24 11:02 146junior

Hello, your multiOTP users must have the same name as used on the Windows login form. (n.surname in your case).

Regards

multiOTP avatar Feb 21 '24 12:02 multiOTP

Thanks for reply my multiotp server is configured with DC's ldap. Users are synchronized. If I run the test from the prompt the users work perfectly with the DC syntax. Should I disconnect it and just create them locally?

146junior avatar Feb 21 '24 13:02 146junior

Hello, you could try to create a user manually and check if it works.

For the LDAP sync you can set what AD field to use using this command :

multiotp -config ldap-cn-identifier="sAMAccountName" (by default sAMAccountName but you could use userPrincipalName)

The login you use MUST be valid for multiOTP AND for Windows. If n.surname is not in sAMAccountName nor in userPrincipalName you probably won't be able to use it to login.

Best regards.

multiOTP avatar Feb 21 '24 14:02 multiOTP

I made the suggested changes, it changed the syntax by importing from ldap in the format [email protected] The same works only from a prompt. I understand that the problem is linked to the dot between name and surname. As soon as I create the credentials with any name and surname it works both from the prompt and from RDWeb, as soon as I add a point via RDWeb it no longer works.

146junior avatar Feb 21 '24 16:02 146junior

Is there any way I can use the syntax I have? Thanks

146junior avatar Feb 27 '24 09:02 146junior

Hello, in the config file C:\Windows\Web\Web.Config, there is a regexp expression named OTPUsernameRegex. Please add a dot (.) in after the capital Z :

<add key="OTPUsernameRegex" value="^[0-9a-zA-Z.]*$" />

Best regards

multiOTP avatar Mar 14 '24 14:03 multiOTP