About data recovery

Question
1

My privacyidea is built on a virtual machine, physical server to be
scrapped, and then the whole virtual machine migration to a new physical
machine.Disaster struck,All I have Token authentication failed.
I tested on the page.Are all “wrong otp pin” tips.
I’m sure the configuration file is the same as before. I even made a
hash check.
The previously saved data restored again.
Still the same.What should i do?

2

Hi Lei,

I am sorry, but I have to point out, this is why other people choose to
get an SLA
privacyIDEA Support Level.

Anyway. If you have a wrong OTP PIN, then verify this:

  1. Any policy in scope:authentication, action:otppin?
  2. System settings: prepend pin or append pin?
  3. Usually the PIN is hashed. Or did you choose system settings
    to encrypt the pin?

When migrating machines you should copy the whole /etc/privacyidea
directory which contains all signing and encryption keys.

Kind regards
CorneliusAm Freitag, den 11.03.2016, 02:58 -0800 schrieb lei xiao:

My privacyidea is built on a virtual machine, physical server to

be scrapped, and then the whole virtual machine migration to a new
physical machine.Disaster struck,All I have Token authentication
failed.
I tested on the page.Are all “wrong otp pin” tips.
I’m sure the configuration file is the same as before. I even made
a hash check.
The previously saved data restored again.
Still the same.What should i do?

–
Please read the blog post about getting help
Getting help – privacyID3A.

For professional services and consultancy regarding two factor
authentication please visit
One Time Services - NetKnights - IT-Sicherheit - Zwei-Faktor-Authentisierung - Verschlüsselung

In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
privacyIDEA Support Level

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea+unsubscribe@googlegroups.com.
To post to this group, send email to privacyidea@googlegroups.com.
Visit this group at https://groups.google.com/group/privacyidea.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/0a2bb144-5a81-4888-9305-5715540ab08f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

signature.asc (836 Bytes)