Cannot login with 2FA enabled

E

eilko

Renowned Member
Jul 21, 2015
17
2
68
Hi

anyone have the same issue? I need to login to my PMG server (pmg-api/stable,now 9.1.2) and after entering username/password I get an option to enter 2FA. After I enter the code I get the "license popup". Clicking on OK I get the 2FA popup again. I can ignore it and click around but several screens don't load. Until I am returned to the login screen again.
 
Time based six digits? The "usual problem" is to have a different time on the host and on the device calculating the current TOTP.

Please verify both clocks are only apart a few seconds. The safe range is a single digit difference, 30 seconds may be too much.

Disclaimer: I do not use PMG --> I am not sure if the described repeating loop indicates a different problem.
 
* As the others said - please verify that the clock is in sync (between the device you use for TOTP code generation and your PMG)
* else - please check if the journal has a pointer at what is not working
* if this doesn't help please post `pmgversion -v`
 
Stoiko Ivanov said:
* As the others said - please verify that the clock is in sync (between the device you use for TOTP code generation and your PMG)
* else - please check if the journal has a pointer at what is not working
* if this doesn't help please post `pmgversion -v`
Click to expand...
time setings are ok. The login is always succesful, but immiditaly shows anoher totp screen below the license popup. No different in Brave browser, Safari, or in incognico screen.

logs shows three times succesful login per try.

Sep 22 18:37:11 pmg pmgdaemon[1594]: successful auth for user 'root@pam'
Sep 22 18:37:15 pmg pmgdaemon[1596]: successful auth for user 'root@pam'
Sep 22 18:37:15 pmg pmgdaemon[1594]: successful auth for user 'root@pam'

Code: 
proxmox-mailgateway: 9.1 (API: 9.1.2/42245585286a, running kernel: 7.0.14-19-pve)
pmg-api: 9.1.2
pmg-gui: 5.2.3
proxmox-kernel-helper: 9.2.0
proxmox-kernel-7.0.14-19-pve-signed: 7.0.14-19
proxmox-kernel-7.0: 7.0.14-19
proxmox-kernel-7.0.14-17-pve-signed: 7.0.14-17
clamav-daemon: 1.4.4+dfsg-1~deb13u1+pmg1
ifupdown: 0.8.44+deb13u1
libarchive-perl: 3.7.4.1
libjs-extjs: 7.0.0-7
libproxmox-acme-perl: 1.7.2
libproxmox-acme-plugins: 1.7.2
libpve-apiclient-perl: 3.4.3
libpve-common-perl: 9.2.2
libpve-http-server-perl: 6.0.5
libxdgmime-perl: 1.2.0
lvm2: 2.03.31-2+pmx1
pmg-docs: 9.1.1
pmg-i18n: 3.10.0
pmg-log-tracker: 3.1.2
pmg-mobile-quarantine-ui: 0.5.3
proxmox-mini-journalreader: 1.7
proxmox-offline-mirror-helper: 0.7.4
proxmox-spamassassin: 4.0.2-2
proxmox-widget-toolkit: 5.2.10
pve-firmware: 3.18-6
pve-xtermjs: 6.0.0-2
zfsutils-linux: 2.4.4-pve1
 
any other messages in the journal around the time of logging in?
else - check /etc/pmg/tfa.json if it looks sane (don't share it publicly)
also check `debsums -ac` for any modifications to the installed packages.

do you see any errors in the browser's console?

I just tested this here - could not reproduce the issue
 
You must log in or register to reply here.
Top Bottom
Back