tailing the access log shows like this so no outstanding errors from there:
Generated an MFA from the affected admin account
MYCLIENTIPHERE - - [23/Nov/2024:20:02:49 -0500] "GET /plugins/barcode/barcode.php?f=png&s=qr&d=otpauth://totp/ITFlow:myemailwashere?secret=mysecretwashereinthelog(scrubbed) HTTP/1.1" 200 1578 "https://itflow.mydomain.com/user_security.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Logged out to test mf
MYCLIENTIPHERE - - [23/Nov/2024:20:02:58 -0500] "GET /post.php?logout HTTP/1.1" 302 976 "https://itflow.mydomain.com/user_security.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Login attempt while mfa enabled
MYCLIENTIPHERE - - [23/Nov/2024:20:02:58 -0500] "GET /login.php HTTP/1.1" 200 1351 "https://itflow.mydomain.com/user_security.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
MYCLIENTIPHERE - - [23/Nov/2024:20:03:01 -0500] "POST /login.php HTTP/1.1" 200 1784 "https://itflow.mydomain.com/login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
After that above to entries, nothing else so I dont have anything to go off of with that log.
Tailing the error.log when attempting to login shows:
Tailing the error log did not show anything during login attempt
Any other suggested logging I can review to why the login is invalid only when MFA is on?
Yes, before logging out after setting MFA I did "Verify" and it was shown as "Successful"
Invalid message I get after entering in the MFA code -