From 9f3d0f3f90459cd63359eed531a14e5f03411d79 Mon Sep 17 00:00:00 2001 From: Christoph Wurst Date: Wed, 8 Jun 2016 15:37:39 +0200 Subject: [PATCH 1/3] document occ command to enable/disable 2fa for a user --- admin_manual/configuration_server/occ_command.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/admin_manual/configuration_server/occ_command.rst b/admin_manual/configuration_server/occ_command.rst index b7a3bab68..84e2801c6 100644 --- a/admin_manual/configuration_server/occ_command.rst +++ b/admin_manual/configuration_server/occ_command.rst @@ -39,6 +39,7 @@ occ Command Directory * :ref:`versions_label` * :ref:`command_line_installation_label` * :ref:`command_line_upgrade_label` +* :ref:`two_factor_auth_label` .. _http_user_label: @@ -1271,3 +1272,17 @@ option:: You can perform this simulation manually with the ``--dry-run`` option:: sudo -u www-data php occ upgrade --dry-run + +Two-factor authentication +------------------------- +If a two-factor provider app is enabled, it is enabled for all users by default +(though the provider can decide whether or not the user has to pass the challenge). +In the case of an user losing access to the second factor (e.g. lost phone with +two-factor SMS verification), the admin can (temporarily) disable the two-factor +check for that user via the occ command:: + + sudo -u www-data php occ twofactor:disable + +To re-enable two-factor auth again use the following commmand:: + + sudo -u www-data php occ twofactor:enable \ No newline at end of file From fd045a04e6d689fe2deafda3cde7f1ae33f39082 Mon Sep 17 00:00:00 2001 From: Christoph Wurst Date: Wed, 8 Jun 2016 15:50:29 +0200 Subject: [PATCH 2/3] document occ command to disable/enable users --- .../configuration_server/occ_command.rst | 25 ++++++++++++++++--- 1 file changed, 21 insertions(+), 4 deletions(-) diff --git a/admin_manual/configuration_server/occ_command.rst b/admin_manual/configuration_server/occ_command.rst index 84e2801c6..b7e114447 100644 --- a/admin_manual/configuration_server/occ_command.rst +++ b/admin_manual/configuration_server/occ_command.rst @@ -40,6 +40,7 @@ occ Command Directory * :ref:`command_line_installation_label` * :ref:`command_line_upgrade_label` * :ref:`two_factor_auth_label` +* :ref:`disable_user_label` .. _http_user_label: @@ -1270,19 +1271,35 @@ option:: sudo -u www-data php occ upgrade --skip-migration-test You can perform this simulation manually with the ``--dry-run`` option:: - + sudo -u www-data php occ upgrade --dry-run -Two-factor authentication +.. _two_factor_auth_label: + +Two-factor Authentication ------------------------- If a two-factor provider app is enabled, it is enabled for all users by default (though the provider can decide whether or not the user has to pass the challenge). In the case of an user losing access to the second factor (e.g. lost phone with -two-factor SMS verification), the admin can (temporarily) disable the two-factor +two-factor SMS verification), the admin can temporarily disable the two-factor check for that user via the occ command:: sudo -u www-data php occ twofactor:disable To re-enable two-factor auth again use the following commmand:: - sudo -u www-data php occ twofactor:enable \ No newline at end of file + sudo -u www-data php occ twofactor:enable + +.. _disable_user_label: + +Disable Users +------------- +Admins can disable users via the occ command too:: + + sudo -u www-data php occ user:disable + +Use the following command to enable the user again:: + + sudo -u www-data php occ user:enable + +Note that once users are disabled, their connected browsers will be disconnected. From 1e628fd687231e48a345b294b28349fe85b9759f Mon Sep 17 00:00:00 2001 From: Christoph Wurst Date: Thu, 9 Jun 2016 15:14:36 +0200 Subject: [PATCH 3/3] add new occ commands to admin news --- admin_manual/whats_new_admin.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/admin_manual/whats_new_admin.rst b/admin_manual/whats_new_admin.rst index 08f938202..c3dd89d3e 100644 --- a/admin_manual/whats_new_admin.rst +++ b/admin_manual/whats_new_admin.rst @@ -10,6 +10,8 @@ ownCloud has many improvements. Some of our new features are: * New ``occ`` option, ``--unscanned``, to scan only previously unscanned files (``_) +* New ``occ`` command to disable/enable users +* New ``occ`` command to disable/enable two-factor auth for specific users * New group tags for system file tags (``_) * Cleaner internal file URLs