promox web ui safe question

haiwan

Well-Known Member
Apr 23, 2019
246
1
58
36
Hi
we want know.
how to limit login promox web ui ip?
have demo show me?
and new U2F qcode don't know how to use .
we see one bye one video , just know work enter 6 number.
how to get this 6 number?
and we use pve shutdown windows2016 notice
VM quit/powerdown failed - got timeout
 
Last edited:
how to limit login promox web ui ip?
Use the Firewall: https://pve.proxmox.com/wiki/Firewall

have demo show me?
Show what?

and new U2F qcode don't know how to use .
we see one bye one video , just know work enter 6 number.
how to get this 6 number?
See: https://pve.proxmox.com/wiki/Two-Factor_Authentication

and we use pve shutdown windows2016 notice
VM quit/powerdown failed - got timeout
Already checked this?
https://pve.proxmox.com/wiki/Qemu-guest-agent
 
hi
i want get a demo
forexample
we just let limit 192.168.1.100 visit promox web ui https://ip:8006
how to set.?
i think we have resolved.
 

Attachments

  • 微信截图_20190601212718.png
    微信截图_20190601212718.png
    16.9 KB · Views: 4
Last edited:
Here's a small cheatsheet how to enable TFA:
  1. install the utils to generate the QR code
    Code:
    apt install qrencode
  2. generate the code itself. I suggest you scan it via Authenticator app or something similar right away in order not to lose it
    Code:
    clear && OATHKEYID=$(oathkeygen) && echo -e OATH key ID for $USER: $OATHKEYID && qrencode -t ANSIUTF8 -o - $(echo "otpauth://totp/PVE:$USER@"$(hostname --fqdn)"?secret=$OATHKEYID")
  3. copy the string - you will need it to include within the user profile (root is the default user)
  4. go to the Datacenter -> Permissions -> Authentication and edit PAM. Set TFA to OAUTH
  5. go to the Datacenter -> Permissions -> Users and edit Root. Set Key IDs the string you've copied in 3)
 
Here's a small cheatsheet how to enable TFA:
  1. install the utils to generate the QR code
    Code:
    apt install qrencode
  2. generate the code itself. I suggest you scan it via Authenticator app or something similar right away in order not to lose it
    Code:
    clear && OATHKEYID=$(oathkeygen) && echo -e OATH key ID for $USER: $OATHKEYID && qrencode -t ANSIUTF8 -o - $(echo "otpauth://totp/PVE:$USER@"$(hostname --fqdn)"?secret=$OATHKEYID")
  3. copy the string - you will need it to include within the user profile (root is the default user)
  4. go to the Datacenter -> Permissions -> Authentication and edit PAM. Set TFA to OAUTH
  5. go to the Datacenter -> Permissions -> Users and edit Root. Set Key IDs the string you've copied in 3)
we have use wechat scan?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!