[SOGo] BTS activities for Thursday, September 19 2024

2024-09-19 Thread SOGo reporter
Title: BTS activities for Thursday, September 19 2024 BTS Activities Home page: https://bugs.sogo.nu Project: SOGo For the period covering: Thursday, September 19 2024 idlast updatestatus (resolution)categorysummary

Re: [SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread Kees van Vloten
On 19-09-2024 14:57, Frank Richter (frank.rich...@hrz.tu-chemnitz.de) wrote: Hi, we protect more and more services that can be reached from the Internet by 2FA/TOTP. Are there any ideas how to force 2FA/TOTP for SOGo when accessing SOGo from the Internet (outside the intranet), but not from

Re: [SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread Frank Richter
Am 19.09.24 um 15:11 schrieb Kees van Vloten (keesvanvlo...@gmail.com): On 19-09-2024 14:57, Frank Richter (frank.rich...@hrz.tu-chemnitz.de) wrote: Hi, we protect more and more services that can be reached from the Internet by 2FA/TOTP. Are there any ideas how to force 2FA/TOTP for SOGo when

Re: [SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread Kees van Vloten
On 19-09-2024 15:16, Frank Richter (frank.rich...@hrz.tu-chemnitz.de) wrote: Am 19.09.24 um 15:11 schrieb Kees van Vloten (keesvanvlo...@gmail.com): On 19-09-2024 14:57, Frank Richter (frank.rich...@hrz.tu-chemnitz.de) wrote: Hi, we protect more and more services that can be reached from t

RE: [SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread qhivert
To add my 2cents by reading the code, in the case of SOGoTrustProxyAuthentication = YES; Sogo will check the presence of the header "x-webobjects-auth-type" : "Basic" If yes, it will use the Basic access authentication -> https://en.wikipedia.org/wiki/Basic_access_authentication to get the passwo

Re: [SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread Kees van Vloten
On 19-09-2024 15:56, qhivert (qhiv...@alinto.eu) wrote: To add my 2cents by reading the code, in the case of SOGoTrustProxyAuthentication = YES; Sogo will check the presence of the header "x-webobjects-auth-type" : "Basic" If yes, it will use the Basic access authentication -> https://en.wiki

[SOGo] Force 2FA/TOTP for logins from outside the intranet?

2024-09-19 Thread Frank Richter
Hi, we protect more and more services that can be reached from the Internet by 2FA/TOTP. Are there any ideas how to force 2FA/TOTP for SOGo when accessing SOGo from the Internet (outside the intranet), but not from the intranet?? Ideally then, SOGo would ask our privacyIDEA API (username, TOT