[SOLVED] TFA web Gui bug

[Spirog]

hello,

using latest Proxmox VE

proxmox-ve: 7.1-1 (running kernel: 5.13.19-6-pve)
pve-manager: 7.1-12 (running version: 7.1-12/b3c09de3)
pve-kernel-helper: 7.1-14
pve-kernel-5.13: 7.1-9
pve-kernel-5.4: 6.4-11
pve-kernel-5.13.19-6-pve: 5.13.19-15
pve-kernel-5.13.19-5-pve: 5.13.19-13
pve-kernel-5.13.19-2-pve: 5.13.19-4
pve-kernel-5.4.157-1-pve: 5.4.157-1
pve-kernel-5.4.73-1-pve: 5.4.73-1
ceph-fuse: 16.2.7
corosync: 3.1.5-pve2
criu: 3.15-1+pve-1
glusterfs-client: 9.2-1
ifupdown: 0.8.36+pve1
ksm-control-daemon: 1.4-1
libjs-extjs: 7.0.0-1
libknet1: 1.22-pve2
libproxmox-acme-perl: 1.4.1
libproxmox-backup-qemu0: 1.2.0-1
libpve-access-control: 7.1-7
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.1-5
libpve-guest-common-perl: 4.1-1
libpve-http-server-perl: 4.1-1
libpve-storage-perl: 7.1-1
libqb0: 1.0.5-1
libspice-server1: 0.14.3-2.1
lvm2: 2.03.11-2.1
lxc-pve: 4.0.11-1
lxcfs: 4.0.11-pve1
novnc-pve: 1.3.0-2
proxmox-backup-client: 2.1.5-1
proxmox-backup-file-restore: 2.1.5-1
proxmox-mini-journalreader: 1.3-1
proxmox-widget-toolkit: 3.4-7
pve-cluster: 7.1-3
pve-container: 4.1-4
pve-docs: 7.1-2
pve-edk2-firmware: 3.20210831-2
pve-firewall: 4.2-5
pve-firmware: 3.3-6
pve-ha-manager: 3.3-3
pve-i18n: 2.6-2
pve-qemu-kvm: 6.1.1-2
pve-xtermjs: 4.16.0-1
qemu-server: 7.1-4
smartmontools: 7.2-pve2
spiceterm: 3.2-2
swtpm: 0.7.1~bpo11+1
vncterm: 1.7-1
zfsutils-linux: 2.1.4-pve1

I think I found a bug with TFA in the GUI

When you go to Datacenter> TFA click edit then uncheck Enable,










it does not work. you log out and it says you need another authentication form.
so you can't login




I then went into nano /etc/pve/user.cfg

removed the X and was able to login.

then tried to enable the check mark in web GUI, logged out and back in again but it never asked me for the TOTP login.
so I went again into nano /etc/pve/user.cfg
and added an X then logged in and it asked me for the TOTP code.

so I do not think the Enable check mark adds or removes the X in nano /etc/pve/user.cfg

thanks for your help in advance

Spiro

 

[Spirog]

(I am trying to figure out why this is happening)

but I don't know why...
Is it just my install of PVE?
or
truly a bug ?

Thanks
Kind Regards,
Spiro

 

[Hannes Laimer]

Hey,

thanks for reporting! I've sent a small patch[1] that should fix the problem.

[1] https://lists.proxmox.com/pipermail/pve-devel/2022-April/052561.html

 

[Spirog]

Hey,

thanks for reporting! I've sent a small patch[1] that should fix the problem.

[1] https://lists.proxmox.com/pipermail/pve-devel/2022-April/052561.html

Hello and thanks for your reply and I am sorry about this - I posted this as a single post to report a bug, before @Fabian_E replied here on another post. since I marked that as Solved.

I thought I would post a clearer picture of what I discovered here hence for the second post.

@Fabian_E created a bug report
https://bugzilla.proxmox.com/show_bug.cgi?id=3989

Kind Regards,
Spiro

 

[Spirog]

@Fabian_E @Hannes Laimer

Not sure cause i have not used Proxmox Mail Gateway or Proxmox Backup Server -

Do these also have the same GUI for totp enable disable X

just wondering cause they may need the patch as well

Thanks again
Spiro