PBS 2FA on PVE

[suriv]

Hi,

is it possible to migrate somehow the 2FA implementation from PBS to PVE? It's a lot more advanced and allows to set multiple keys per user and login with hardware keys on mobile devices (for example on iPhone) which IMO is a very important feature.

 

[t.lamprecht]

Hi,

this is on the roadmap. The current PVE TFA implementation happened at a time when WebAuthn was not yet really a (useful) thing, and we had some even older historic baggage to carry too. Also, as we had to re-do the whole thing in rust for PBS anyhow we went for a more general approach.

In general, I'd like to have such a flexible TFA feature like PBS has in any project I use, so we'll definitively get there in PVE sooner or later

 

[suriv]

Nice to hear that it's on the roadmap as at the moment the wiki list is quite short https://pve.proxmox.com/wiki/Roadmap

Thank you

 

[t.lamprecht]

The roadmap in the wiki provides only some more general points, there's always more going on.

But there's https://bugzilla.proxmox.com/show_bug.cgi?id=2841 where you can follow any progress regarding this, I just updated it with some better context.
(edit, hit ctrl+enter to early)