[PDM 1.1.7] 2FA for Administrator Accounts on Remotes used by PDM?

Sep 1, 2022
560
215
68
42
Hello,

As a preamble, here's my setup:
  • I'm currently testing PDM with a single-node PVE Remote cluster (that mostly just exists to test PDM).
  • I've created an Administrator-privileged account on the PVE Remote cluster for PDM to use to monitor and control the cluster.
  • The Administrator does not have any form of 2FA enabled.
If I enable 2FA on the Administrator account--in particular, OTP-based 2FA--will that break PDM's ability to talk to the PVE Remote? I assume not, since it's logging in via a token, but I'm still pretty new to using tokens at all and wanted to make sure I understood correctly how this works.

Thanks!
 
If I enable 2FA on the Administrator account--in particular, OTP-based 2FA--will that break PDM's ability to talk to the PVE Remote? I assume not, since it's logging in via a token,
correct, the token does not use/inherit the users tfa. in fact, tokens can't have a second factor at all.
This kind of use case is exactly why tokens exist in the first place to give access to users resources in an automated fashion that can be easily revoked, etc.
 
  • Like
Reactions: Johannes S