[SOLVED] OATH PVE broken since last update ?

meepmeep

Renowned Member
Apr 14, 2013
51
8
73
Hi

Since last update (proxmox-ve 4.2-58), it looks like OATH for pve is broken. It used to work, but now I get this message each time I try to log in :

Jul 20 08:59:50 jarvis pvedaemon[24595]: authentication failure; rhost=x.x.x.x user=meepmeep@pve msg=unrecognized key format, must be hex or base32 encoded

I deactivated / reactivated oath on PVE, and generated a new key with oathkeygen, I triple checked that I enter the correct information on my google authenticator. I also checked the date on my phone and the server.

Any idea why it suddenly doesn't work anymore ? Why is the key unrecognized ?

proxmox-ve: 4.2-58 (running kernel: 4.4.13-1-pve)
pve-manager: 4.2-17 (running version: 4.2-17/e1400248)
pve-kernel-4.4.6-1-pve: 4.4.6-48
pve-kernel-4.4.13-1-pve: 4.4.13-56
pve-kernel-4.4.13-2-pve: 4.4.13-58
pve-kernel-4.4.10-1-pve: 4.4.10-54
lvm2: 2.02.116-pve2
corosync-pve: 2.3.5-2
libqb0: 1.0-1
pve-cluster: 4.0-43
qemu-server: 4.0-85
pve-firmware: 1.1-8
libpve-common-perl: 4.0-71
libpve-access-control: 4.0-17
libpve-storage-perl: 4.0-56
pve-libspice-server1: 0.12.8-1
vncterm: 1.2-1
pve-qemu-kvm: 2.6-1
pve-container: 1.0-71
pve-firewall: 2.0-29
pve-ha-manager: 1.0-32
ksm-control-daemon: 1.2-1
glusterfs-client: 3.5.2-2+deb8u2
lxc-pve: 1.1.5-7
lxcfs: 2.0.0-pve2
cgmanager: 0.39-pve1
criu: 1.6.0-1
zfsutils: 0.6.5.7-pve10~bpo80

Regards
 
Hi

I can confirm this issue and it occurs after the update of libpve-access-control to 4.0-17. Since the downgrade back to version 4.0-16 the login works as before.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!