In user Interface klick on "W3C Web Authentication"
To see the "Add new Authenticator" Button to add Authenticator
No "Add new Authenticator" Button
J4b6
Debian Buster 10
PHP 7.3
ISPConfig
Apache/2.4.38
Thank you in Advance
Labels |
Added:
?
|
Hi Phil, Thx for your Time ;)
Yes, I`m using "lets encrypt" for HTTPS
Yes, GMP and BCmath seems to be installed:
Here is the Output from PHP -m :
`[PHP Modules]
apc
apcu
bcmath
calendar
Core
ctype
curl
date
dom
exif
fileinfo
filter
ftp
gd
gettext
gmp
hash
iconv
imagick
imap
intl
json
libxml
mbstring
memcache
mysqli
mysqlnd
openssl
pcntl
pcre
PDO
pdo_mysql
pdo_sqlite
Phar
posix
pspell
readline
recode
Reflection
session
shmop
SimpleXML
soap
sockets
sodium
SPL
sqlite3
standard
sysvmsg
sysvsem
sysvshm
tidy
tokenizer
wddx
xml
xmlreader
xmlrpc
xmlwriter
xsl
Zend OPcache
zip
zlib
[Zend Modules]
Zend OPcache
`
not a clue why the Button is not visible... ;(
Found this, if relevant? #29731
Do you have a javascript error in your console.
The only reason the button would not show should be if you dont have GMP or bcmath installed.
PHP -m
Thats at the command line - which could and often does have a different list of PHP modules.
Anyway, you would get a red warning if they were not installed above where the button should be.
J4b6
There is a newer version or test with a nightly build.
Either of the PHP extensions GMP or BCmath must be loaded to add authenticators - can you confirm you have one of these PHP Extensions installed?
Looks like solved meanwhile. See #30316 (comment)
that upstream fix would have fixed a JS alert saying you could not add when you had touched your device. Different problem to this.
@PhilETaylor : there are also no Errors in the Console...
Please run this in a PHP file:
<?php
var_dump(function_exists('gmp_intval'));
var_dump(function_exists('bccomp'));
what does it output?
Showes:
bool(true) bool(true)
ok the only other place that sets allow_add
to false is if you are trying to edit A DIFFERENT USERS webauthn keys - this is not allowed.
Ah, OK.... I`m trying it as ADMIN to a Registered User! So is this the Error?
How can I do it as Registered User?
Thank you so much.. ;)
You, logged in as admin, cannot add webauthn for other users. This is by security design of webauthn standards.
So if I Try it as regisered User on Frontend, I get this message:
The specified username does not correspond to a user account that has enabled passwordless login on this site.
Is there a manual I can use? ThX
The specified username does not correspond to a user account that has enabled passwordless login on this site.
You first have to be logged in as a user, and add the Key. Then logout and then you can use the key. If the user has no keys enabled then you get the message above.
The "best" documentation is currently the (very bad) page at https://docs.joomla.org/WebAuthn_Passwordless_Login
also see https://magazine.joomla.org/all-issues/december/passwordless-authentication-for-secure-fast-easy-logins-in-joomla-4 which was written by Nic.
AAhhh... THERE IT IS!!! ;) ;) The Add Button is in the Users Profile.. ;)
Thank You sooo much, Phil.. <3
Understanding this was a challenge for me... ;)
I'll finish now the config and post a small HOWTO for Dummys like me... ;)
THAANNK YOOUU!! (Struggling for Days.. ;)) )
Im busy adding a warning if you are not logged in as the user so you can see it in future (and others can not fall into this trap)
This is GREAT, Phil... ;)
As Admin I`m used to do everything in Joomla and if there is no warning (and in this case then no +Button) leaves me totally confused.... ;)
Ok, Easy Step by Step Howto:
This should be it... ;)
I`m, trying to use the build in Webauth from Firefox, (Softkey) but this its not working as easy as I expected.... so I have to research more bout it...
Buy a Yubikey and never look back! https://www.yubico.com/je/quiz/
Status | New | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-04-08 00:03:47 |
Closed_By | ⇒ | richard67 |
@Dr-Sommer please test #33064 so that it has a chance of being merged :)
Either of the PHP extensions GMP or BCmath must be loaded to add authenticators - can you confirm you have one of these PHP Extensions installed?