Two-factor challenge failed

[10bias]

Steps to reproduce

After some time the two factor code does not work. I have to reboot the server and than it will work for some time.

1. Login with username and password
2. enter the two factor code
3. code was not accepted
4. enter an new two factor code
5. code was not accepted
6. reboot the server
7. login
8. enter two factor code
9. code will be accepted

In nextcloud i can see this warning

Two-factor challenge failed: Tobias (Remote IP: xxxxxx)

Expected behaviour

The two factor works without a reboot.

Actual behaviour

The two factor works randomly after some time not.

Server configuration

Operating system: Linux 4.18.0-477 -> Nextcloud is running in docker containers

Web server: nginx/1.20.2 (fpm-fcgi)

Database: pgsql PostgreSQL 14.2

PHP version: 8.2.18

Version: (see admin page) 28.0.4 - 28.0.4.1

Updated from an older version or fresh install:

List of activated apps:

• activity: 2.20.0
• admin_audit: 1.18.0
• bookmarks: 13.1.3
• bruteforcesettings: 2.8.0
• calendar: 4.6.7
• circles: 28.0.0
• cloud_federation_api: 1.11.0
• comments: 1.18.0
• contacts: 5.5.3
• contactsinteraction: 1.9.0
• cookbook: 0.11.0
• cospend: 1.6.1
• dashboard: 7.8.0
• dav: 1.29.1
• deck: 1.12.2
• drawio: 3.0.2
• federatedfilesharing: 1.18.0
• federation: 1.18.0
• files: 2.0.0
• files_external: 1.20.0
• files_markdown: 2.4.1
• files_pdfviewer: 2.9.0
• files_reminders: 1.1.0
• files_sharing: 1.20.0
• files_trashbin: 1.18.0
• files_versions: 1.21.0
• firstrunwizard: 2.17.0
• groupfolders: 16.0.6
• logreader: 2.13.0
• lookup_server_connector: 1.16.0
• mail: 3.5.8
• maps: 1.3.1
• news: 24.0.0
• nextcloud_announcements: 1.17.0
• notes: 4.9.4
• notifications: 2.16.0
• notify_push: 0.6.10
• oauth2: 1.16.3
• onlyoffice: 9.1.2
• password_policy: 1.18.0
• passwords: 2024.4.21
• photos: 2.4.0
• polls: 7.0.3
• privacy: 1.12.0
• provisioning_api: 1.18.0
• recommendations: 2.0.0
• related_resources: 1.3.0
• richdocuments: 8.3.4
• serverinfo: 1.18.0
• settings: 1.10.1
• sharebymail: 1.18.0
• spreed: 18.0.7
• support: 1.11.1
• survey_client: 1.16.0
• systemtags: 1.18.0
• tasks: 0.15.0
• text: 3.9.1
• theming: 2.3.0
• twofactor_backupcodes: 1.17.0
• twofactor_totp: 10.0.0-beta.2
• updatenotification: 1.18.0
• user_status: 1.8.1
• viewer: 2.2.0
• weather_status: 1.8.0
• workflowengine: 2.10.0

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your server installation folder

The content of config/config.php:

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

or

Insert your config.php content here
Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …)

Client configuration

Browser:

Operating system:

Logs

Web server error log

Insert your webserver log here

Server log (data/nextcloud.log)

Two-factor challenge failed: Tobias (Remote IP: xxxxxx)

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log

[call-me-matt]

Had a similar problem, solved it by synchronizing the clock

first check timedatectl status, if the system clock is not synchronized, execute apt install systemd-timesyncd, then timedatectl set-ntp true