OpenVPN RW: cannot login with 2FA after migration

[Tbaile]

Steps to reproduce

• Migrate from a NS7 to a NS8, the OpenVPN RW instance MUST NOT have 2FA activated
• Now with users configured, check that VPN still works
• Now edit the RW instance, set authentication with 2FA
• Download the QR code

Expected behavior

Download of the QR code goes well

Actual behavior

Error is thrown, no QR code is downloaded

Components

ns-migration <= 0.0.18

See also

Mattermost Thread

---

It appears that during migration, no openvpn_2fa field is being populated.
This doesn't impact new users since add_user function generates the TOTP no matter what the RW configuration is.
Workaround is to generate the TOTP using pyotp.random_base32() and set it manually to the user.

[Tbaile]

QA

23.05.5-ns.1.4.1-40-g3ebca0f35

Try again the procedure above, check that now it works.

[gsanchietti]

Verified: 2FA secret is generated even if the 2FA was not enabled on NS7