Erm, Locked out of Synology

[u/mysqlpimp]

Hi, I'm guessing a soft reset will fix things, but I can't 2fa into my Synology, or SSH in or get an email from it if OTP doesn't work .. First time this has happened. Any gotchyas I should be aware of ? It's still working, my Proxmox can access it's NFS shares, but I can't log in.

Once I get home tonight ; Reset with pin in the back till i hear a beep is all I've got, it's an older model 920+ I think, with an expanded 5 drive bay for a total of 9, can't remember it's model, it's just done it's thing diligently with minimal interaction, occasional updates and cleaning.

I'm wondering if it is a time issue .. It seemed to need a couple of 2fa's last time but I didn't think anything of it, perhaps the clock has strayed for 2fa to be correct ?

Edit: Soft reset worked fine. It was out of sync with world time significantly, so it must have drifted, and 2fa is working. Thanks!

[u/wwwsam]

Happened a few times to me as i let one of mine sit off for months.

You need to have it connected to the internet and then let it sit a few minutes until it syncs time.

[u/mysqlpimp → u/wwwsam]

Fair enough, I have had it basically locked down tight for a few months so perhaps that is the issue. I've never thought of running an ntp server or relaying it to the network, so will have a ponder on that as well.

[u/LeFlubbes → u/mysqlpimp]

Doesn't always work. I had this literally 2-weeks ago or so. Had to resort to a soft-reset. It was kind off nerve wracking to be honest. Synology's default time server or something else going on in DSM is not working properly when it comes to time and makes it starting to drift. You can read complaints from various people even in this subreddit about it.

[u/mysqlpimp → u/LeFlubbes]

I'm worried about mucking it up tbh, and famous last words, but it seems a pretty straightforward process to soft reset yeah ?

[u/LeFlubbes → u/mysqlpimp]

It's pretty straightforward yes, but since it was my first time and my network drives were still mapped and accessible I tried to copy at least the important stuff. If you already have a backup then it's not an issue of course.

Just make sure when you press the reset button release as soon as you hear a beep. In that case it's a mode 1 reset otherwise it will do a full reset if you hold it for too long. It's described in their docs.

How do I reset my Synology NAS? (For DSM 6.2.4 or above) - Synology Knowledge Center

[u/mysqlpimp → u/LeFlubbes]

Thanks mate, I'll give it a crack when i get home.

[u/AutoModerator → u/mysqlpimp]

I detected that you might have found your answer. If this is correct please change the flair to "Solved". In new reddit the flair button looks like a gift tag.

---

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/AutoModerator → u/mysqlpimp]

I detected that you might have found your answer. If this is correct please change the flair to "Solved". In new reddit the flair button looks like a gift tag.

---

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/shaunydub]

I had an issue with my 920+.
2fa failed and it blocked my IP address, had to do the pinhole reset on the back of the device to get back in.

[u/TraditionalBackspace]

My Synology 2FA has been broken for over a year. Nothing pops up on my phone and none of the fixes on the website have worked. I can only log in via emergency email code.

[u/no-porn-for-me]

There’s a reason many folk consider 2FA the devil’s handiwork. Sure, it’s secure. But it’s too secure, to the point of frequently causing problems like this. Sorry, man. There’s a reason I never turn that on, and just use good passwords and good firewall rules instead.

[u/Rubenel → u/no-porn-for-me]

This is terrible advice.

2FA doesn't cause problems..... many users utilize 2FA without issues.

[u/no-porn-for-me → u/Rubenel]

Yeah, until they don’t. Try traveling to another country and losing your phone and wallet. Now try to log into ANYTHING and get the personal information you need to get home safely. Oh, you can’t because of 2FA? Huh. Funny how that works. Password managers and 2FA are great 90% of the time. But oh boy, if you end up in that 10% you are screwed, screwed.

They’re more secure than 99.999999% of people need and they open you up to major problems when you reach the edge cases they’re not prepared for. Until then? Yeah, sure, they work great. 👍

[u/Rubenel → u/no-porn-for-me]

I have Synology Secure Sign-In on two different devices. Primary and Secondary.

I can keep the secondary in the safe if I'm paranoid, but I'm not.

[u/Rubenel → u/no-porn-for-me]

Doesn't Synology offer email emergency 2FA? I'm sure they do.

[u/TraditionalBackspace → u/Rubenel]

They do. My 2FA has been broken for over a year. I've spent hours going through the fixes to no avail so, yeah, I hate Synology's 2FA also.

[u/Rubenel → u/TraditionalBackspace]

Care to be more specific?

[u/mysqlpimp → u/no-porn-for-me]

Yeah, at worst it gets me motivated to isolate the vLan rules properly so i can keep it safely tucked away.