TFA-enabled login currently works only with a TTY - Join Cluster

[MysticDev-Josh]

I have TFA attached to the ROOT account and this is what was popping up when I tried to add another node to the cluster.
I did a search for this but they were using Certs.

TASK ERROR: TFA-enabled login currently works only with a TTY. at /usr/share/perl5/PVE/APIClient/LWP.pm line 99

 

[MysticDev-Josh]

Thanks for the help.

 

[razit]

Hello,I know that is old topic, but for future users I provide reply

Use command line if you are using TFA on main cluster device. Example:

pvecm add <IP of master or Domain Name - if you are using SSL from LE> -link0 <your IPv4> -link1 <Your IPv6>

 

[olepinguin]

what?

edit:
from the machine that want to join: pvecm add <target ip> -link0 <source ip>
follow cli commands to identify incl OTP

https://pve.proxmox.com/pve-docs/pvecm.1.html

 

[j.io]

I follow your approach and could join the cluster. Now I cannot login to the "joining / slave node" anymore directly. The password is fine but the TOTP code is not accepted as valid. I have access to the root shell of the slave node via the master node, since the slave node is now part of the cluster. Anyone experienced this?

 

[olepinguin]

I follow your approach and could join the cluster. Now I cannot login to the "joining / slave node" anymore directly. The password is fine but the TOTP code is not accepted as valid. I have access to the root shell of the slave node via the master node, since the slave node is now part of the cluster. Anyone experienced this?

sorry - just saw it. I guess that is the normal behavior

 

[f1shboll]

Hello,I know that is old topic, but for future users I provide reply

Use command line if you are using TFA on main cluster device. Example:

pvecm add <IP of master or Domain Name - if you are using SSL from LE> -link0 <your IPv4> -link1 <Your IPv6>

This worked great, thank you!

 

[used1d]

Can anyone explain this for a noob, please? I don't have a cluster, just one PVE and one PBS. The PBS is getting that same error when trying to use as datastore with 2FA enabled.

 

[bjornberfelo]

Can anyone explain this for a noob, please? I don't have a cluster, just one PVE and one PBS. The PBS is getting that same error when trying to use as datastore with 2FA enabled.

This command solved it for me: pvecm add <cluster-ip> -link0 <node-ip> --use_ssh