Problem disabling PVE 6's 2fa

[Sandbo]

Hi,

I have enabled 2fa for a few days and it has been working fine.

Then, I need to remove the PVE system from the internet and fix something by connecting that to a monitor.
After a while, not sure if it is because of the change in BIOS setting or the clock is not synchronized, the same code no longer works.

I tried to disable 2fa from command line, but apparently the old method no longer works; there is no domain.cfg file inside the /etc/pve folder. User.cfg did not seem to contain anything related to 2fa.

Could you point me to the right method? Thanks.

Update:
I found the way to disable it, basically just to change the file
/etc/pve/user.cfg to
user:root@pam:1:0::::::

But now I have a 2nd problem. After I could login, I try to reconfigure the 2fa, got it to work as it accept the code generated by my phone. Then I try to login but it said it fails again. Apparently now my 2fa is broken and I can no longer use it.

 

[wolfgang]

Hi,

Are you talking about TOTP 2fa?

If so it is very important that the time of the server and the client are synchronized.
So ensure you use a correct working NTP server.

 

[Sandbo]

Hi,

Are you talking about TOTP 2fa?

If so it is very important that the time of the server and the client are synchronized.
So ensure you use a correct working NTP server.

Thanks for the idea, the problem was solved by reinstalling the system eventually.
But you are right, I haven't paid attention to see if there was a mismatch in the date and time so it could well be the cause.