Disable OTP via Console

[redjohn]

Hello,

I have problems with OTP Login. I can not login now at the promox webinterface. is there any option to disable the otp login for linux users? i have ssh access to the server.

please help!

best regards,

Oliver

 

[LnxBil]

Have a look at /etc/pve/user.cfg and edit the file (please make copy).

 

[wbumiller]

What kind of problems? On your or on PVE's end? If you think it's a problem on PVE's side, please post the output of `pveversion -v` and describe the problems in more detail.

To disable it from SSH open /etc/pve/domains.cfg and remove the tfa line in the authentication section where you want to disable it.

 

[Zaman]

for me by change the setting of that user in /etc/pve/user.cfg from
user:root@pam:1:0:::xx@xxx.org::x:

to
user:root@pam:1:0:::xx@xxx.org::::
strange i check `/etc/pve/domains.cfg ` there is no thing
maybe bcs there is just one node

 

[jsabater]

for me by change the setting of that user in /etc/pve/user.cfg from
user:root@pam:1:0:::xx@xxx.org::x:

to
user:root@pam:1:0:::xx@xxx.org::::
strange i check `/etc/pve/domains.cfg ` there is no thing
maybe bcs there is just one node

I was experiencing the same problem on version 7.3 (disabled 2FA of my root user because I wanted to add a new node to the cluster to be enabled afterwards) and was looking for the file. Found it at /etc/pve/priv/tfa.cfg. I move the file to .bak and I could add the node. Then restored it.

 

[chunkee]

for me by change the setting of that user in /etc/pve/user.cfg from
user:root@pam:1:0:::xx@xxx.org::x:

to
user:root@pam:1:0:::xx@xxx.org::::
strange i check `/etc/pve/domains.cfg ` there is no thing
maybe bcs there is just one node

This fixed my issue too.