PBS 2FA on PVE

suriv

Member
Aug 20, 2021
17
3
8
39
Hi,

is it possible to migrate somehow the 2FA implementation from PBS to PVE? It's a lot more advanced and allows to set multiple keys per user and login with hardware keys on mobile devices (for example on iPhone) which IMO is a very important feature.
 
Last edited:
Hi,

this is on the roadmap. The current PVE TFA implementation happened at a time when WebAuthn was not yet really a (useful) thing, and we had some even older historic baggage to carry too. Also, as we had to re-do the whole thing in rust for PBS anyhow we went for a more general approach.

In general, I'd like to have such a flexible TFA feature like PBS has in any project I use, so we'll definitively get there in PVE sooner or later :)
 
The roadmap in the wiki provides only some more general points, there's always more going on.

But there's https://bugzilla.proxmox.com/show_bug.cgi?id=2841 where you can follow any progress regarding this, I just updated it with some better context.
(edit, hit ctrl+enter to early)