2fa code issues

[privsec]

I now have multiple users experiencing an issue with their 2FA codes that was set up with SOGo.

How do I have them bypass/reset their accounts?

I just tried myself, and now my two (personal and business) account is not letting me sign in at sogo.domain.com, I can login in just fine st snappy.domain.com

[BrutalBirdie]

@privsec
In the Database it's:

To see your profile

SELECT *
FROM sogo_user_profile
WHERE c_uid = "your@email.com";

Disable 2FA:

UPDATE sogo_user_profile
SET c_defaults = REPLACE(
c_defaults,
"\\"SOGoTOTPEnabled\\": 1",
"\\"SOGoTOTPEnabled\\": 0")
WHERE c_uid = "your@email.com";

[girish]

@privsec usually 2fa errors come from time not being in sync. Can you check the server time?

[privsec]

@girish Sure, but weird thing is all my other 2fa for services work without a problem

[True]

For those who still struggle with the SQL method:
Open up the terminal and just paste in this command to disable Sogo 2FA for a specific mailbox / user

sogo-tool user-preferences set defaults your@email.com SOGoTOTPEnabled '{"SOGoTOTPEnabled":0}'

@girish this single line of code could be easily added to the documentation: https://docs.cloudron.io/apps/sogo/
There is nothing there regarding 2FA reset.

"sogo-tool" is a CLI tool. Comes built in with the deployed image.
Source for the solution: https://github.com/mailcow/mailcow-dockerized/issues/4490#issuecomment-1052121610

[girish]

Added to docs, thanks @True and @BrutalBirdie