HOW TO RESET GOOGLE 2FA IF USER HAS ACCESS TO THE GUI AND HAVE ADMIN PRIVILEGES
If you already an account with admin privileges, you can reset them via the GUI itself.Login as the admin user, navigate to the user list, select the user that had accidentally set Google 2FA, click on the password icon for the user, and select 'clear 2factor authentication secret box'
The user can now login without 2FA being asked if 2FA is not enforced else the user would be prompted to re-setup 2FA again.
HOW CAN A USER RESET GOOGLE 2FA IN GUI ?
Individual users can login into the web interface and go to Account->Google Authenticator->set
To reset it you can do by Account->Google Authenticator->reset
How to disable two factor authentication ( 2FA ) for the admin user and others FROM THE DATABASE?
For Ezeelogin Version 7 and above
1. To disable two factor authentication ( 2FA ) for admin user, run the following commands.
2. To disable two factor authentication ( 2FA ) for all users ,run the following command.
eak = Access Keyword
eyk = Yubikey
egs = Google Authenticator
set_duo = DUO 2FA
For Ezeelogin Version 6 and below
1. Find database name and database prefix from /usr/local/etc/ezlogin/ez.conf in ezeelogin gateway server.
2. Login to mysql command prompt
Replace the "db_user" & "dn_name" with values in /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server.You can find the db password as "db_pass" in /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server.
4. Run the following command to two factor authentication ( 2FA ) for admin user
Replace "dbprefix_" with the value of dbprefix_ in /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server. For example "dbprefix_settings" is to be replaced with "casmbn_settings" here.
Run the following command two factor authentication ( 2FA ) for all users.
you have to use correct db_name and dbprefix from ez.conf if you are running the mysql commands manually.