Trick for Authentication/2FA?

[hidden72]

I'm having problems authenticating to ring.

Ring Plugin 1.0.0.27 Beta on HS4 Pro 4.2.18.3 (Windows)

I've accepted the terms/conditions, and the accept button has gone away. I filled out my username/password, and then click on "Fully Authenticate Ring Client". Nothing happens. No pop-ups, no additional fields to put in my authentication code, etc. Here's the relevant & redacted verbose logs:

3/29/2023 4:30:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = navItemClick=General
3/29/2023 4:30:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = navItemClick=General
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=fullAuthenticateBtn
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=fullAuthenticateBtn
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - EncryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - EncryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - Authenticate called with code =
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - DecryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - getAccessToken called with refreshToken available = False
3/29/2023 4:30:29 PM : LOG_TYPE_WARNING - Unsuccesfull getAccessToken while sending URL = https://oauth.ring.com/oauth/token, body = {"client_id":"ring_official_android","grant_type":"passwo rd" ,"password":"xxxxxxxxxx","username":"yyyyyyy@zzzzzzz.com" , "refresh_token":"","scope":"client","api_version":11,"de vice _model":"homeseer-ring"} and error = The request was aborted: Could not create SSL/TLS secure channel.
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=tabClick&tabItem=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=tabClick&tabItem=Debug

In a browser on the HomeSeer machine, I am able to surf to "https://oauth.ring.com/oauth/token" - which I assume means that DNS is working and firewall is letting it through. Any ideas on how to get this authenticated?

Thanks!

[dcorsus]

I'm having problems authenticating to ring.

Ring Plugin 1.0.0.27 Beta on HS4 Pro 4.2.18.3 (Windows)

I've accepted the terms/conditions, and the accept button has gone away. I filled out my username/password, and then click on "Fully Authenticate Ring Client". Nothing happens. No pop-ups, no additional fields to put in my authentication code, etc. Here's the relevant & redacted verbose logs:

3/29/2023 4:30:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = navItemClick=General
3/29/2023 4:30:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = navItemClick=General
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=fullAuthenticateBtn
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=fullAuthenticateBtn
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - EncryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - EncryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - Authenticate called with code =
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - DecryptData , no data
3/29/2023 4:30:28 PM : LOG_TYPE_INFO - getAccessToken called with refreshToken available = False
3/29/2023 4:30:29 PM : LOG_TYPE_WARNING - Unsuccesfull getAccessToken while sending URL = https://oauth.ring.com/oauth/token, body = {"client_id":"ring_official_android","grant_type":"passwo rd" ,"password":"xxxxxxxxxx","username":"yyyyyyy@zzzzzzz.com" , "refresh_token":"","scope":"client","api_version":11,"de vice _model":"homeseer-ring"} and error = The request was aborted: Could not create SSL/TLS secure channel.
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - PostBackProc called with page = settings.html and data = buttonClicked=tabClick&tabItem=Debug
3/29/2023 4:31:20 PM : LOG_TYPE_INFO - SettingsPostBackProc called with page = settings.html and data = buttonClicked=tabClick&tabItem=Debug

In a browser on the HomeSeer machine, I am able to surf to "https://oauth.ring.com/oauth/token" - which I assume means that DNS is working and firewall is letting it through. Any ideas on how to get this authenticated?

Thanks!

What kind of authentication do you have on your Ring install? Is it an SMS with code#, an email or perhaps a code generator? I have only tried with my own which sends me a txt to my cell.
Did you hit enter after setting your password/userid? I have the impression the username or password is missing. If you refresh your browser when you are on the settings page, does the password/username still stay or does it disappear?

[hidden72]

What kind of authentication do you have on your Ring install? Is it an SMS with code#, an email or perhaps a code generator? I have only tried with my own which sends me a txt to my cell.
Did you hit enter after setting your password/userid? I have the impression the username or password is missing. If you refresh your browser when you are on the settings page, does the password/username still stay or does it disappear?

It was originally on SMS - although I never received an SMS after attempting authentication with the plugin. I switched it to the passcode generator, but that seems to be behaving the same way. I'll switch back to SMS to make my environment look more like yours and to simplify testing.

Switching away from the Ring Plugin/General page, and then coming back, both username & password are still populated. Refreshing the browser shows the same behavior. Jump to another computer and the info is still pre-populated... so I assume that they're being saved. If I clear one or both of the fields and then attempt to authenticate, I get the error message that says they're both required.

I just upgraded to 1.0.0.28 as it just became available. Same issue still exists.

Thanks for the quick response. Any other ideas?

[dcorsus]

What version of Windows are you running this under? Are the updates to .NET up to date (at least 4.7.2 needed). No VM, Dockers, HS as a service? HS running as admin?
Now Google this error a bit so see if there is anything wrong.

[dcorsus]

Most postings that I can find for this error seems to point to forcing use of TLS1.2 ... so what OS version, .NET version

[hidden72]

What version of Windows are you running this under? Are the updates to .NET up to date (at least 4.7.2 needed). No VM, Dockers, HS as a service? HS running as admin?
Now Google this error a bit so see if there is anything wrong.

YES! Thanks for the pointer. It's Windows 7 x86 on a VMware server... I did a few things (including upgrading .net to 4.7.2, tweaking some registry entries so that TLS 1.1 and 1.2 weren't disabled, rebooted, and things are good!

As a side-note, I hadn't swapped back to SMS just yet - so I can happily report that the 2FA/Authenticator App code works properly too. Now it's time to go backup that VM and get it upgraded to a modern/supported operating system

Thanks again!