Nethsec Controller module : 2FA initialisation bug

pagaille · September 17, 2025, 5:56pm

Nethsecurity Controller latest version

Click the create 2FA OTP button
Change your mind and click cancel
Log out
Try to log in again : it asks for an uninitialised OTP….

Thanks

Matthieu

mrmarkuz · September 17, 2025, 7:34pm

Confirmed, thanks for pointing out.

You could reset the 2FA to be able login again, see GitHub - NethServer/ns8-nethsecurity-controller

Issue opened:

github.com/NethServer/dev

NethSecurity controller: 2FA is enabled when cancelled

opened 07:46PM - 17 Sep 25 UTC

mrmarkuz

After clicking the "Configure 2FA" button in the account settings 2FA is enabled… without confirming it by entering an OTP code and clicking "Configure". <img width="1286" height="375" alt="Image" src="https://github.com/user-attachments/assets/cbbbf78c-44fd-4792-bb21-92d48ee73721" /> **Steps to reproduce** - Install NethSecurity controller - Go to account settings on the top right - Click "Configure 2FA" - Click "Cancel" - Refresh the page **Expected behavior** 2FA isn't enabled **Actual behavior** 2FA is enabled <img width="1587" height="798" alt="Image" src="https://github.com/user-attachments/assets/82f4d7d0-7ec3-4635-b00e-5c169df434b6" /> **Components** NethSecurity controller 2.0.0 **See also** https://community.nethserver.org/t/nethsec-controller-module-2fa-initialisation-bug/26345 ---- Thanks to Matthieu Gaillet

giacomo · September 18, 2025, 3:11pm

A fix is ready for testing.

Application version is: 2.1.0-dev.1

mrmarkuz · September 22, 2025, 7:20pm

Fix was released with NethSec Controller 2.1.0.