[SOLVED] TFA web Gui bug

Spirog

Member
Jan 31, 2022
230
56
18
Chicago, IL
hello,

using latest Proxmox VE
Code:
proxmox-ve: 7.1-1 (running kernel: 5.13.19-6-pve)
pve-manager: 7.1-12 (running version: 7.1-12/b3c09de3)
pve-kernel-helper: 7.1-14
pve-kernel-5.13: 7.1-9
pve-kernel-5.4: 6.4-11
pve-kernel-5.13.19-6-pve: 5.13.19-15
pve-kernel-5.13.19-5-pve: 5.13.19-13
pve-kernel-5.13.19-2-pve: 5.13.19-4
pve-kernel-5.4.157-1-pve: 5.4.157-1
pve-kernel-5.4.73-1-pve: 5.4.73-1
ceph-fuse: 16.2.7
corosync: 3.1.5-pve2
criu: 3.15-1+pve-1
glusterfs-client: 9.2-1
ifupdown: 0.8.36+pve1
ksm-control-daemon: 1.4-1
libjs-extjs: 7.0.0-1
libknet1: 1.22-pve2
libproxmox-acme-perl: 1.4.1
libproxmox-backup-qemu0: 1.2.0-1
libpve-access-control: 7.1-7
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.1-5
libpve-guest-common-perl: 4.1-1
libpve-http-server-perl: 4.1-1
libpve-storage-perl: 7.1-1
libqb0: 1.0.5-1
libspice-server1: 0.14.3-2.1
lvm2: 2.03.11-2.1
lxc-pve: 4.0.11-1
lxcfs: 4.0.11-pve1
novnc-pve: 1.3.0-2
proxmox-backup-client: 2.1.5-1
proxmox-backup-file-restore: 2.1.5-1
proxmox-mini-journalreader: 1.3-1
proxmox-widget-toolkit: 3.4-7
pve-cluster: 7.1-3
pve-container: 4.1-4
pve-docs: 7.1-2
pve-edk2-firmware: 3.20210831-2
pve-firewall: 4.2-5
pve-firmware: 3.3-6
pve-ha-manager: 3.3-3
pve-i18n: 2.6-2
pve-qemu-kvm: 6.1.1-2
pve-xtermjs: 4.16.0-1
qemu-server: 7.1-4
smartmontools: 7.2-pve2
spiceterm: 3.2-2
swtpm: 0.7.1~bpo11+1
vncterm: 1.7-1
zfsutils-linux: 2.1.4-pve1


I think I found a bug with TFA in the GUI

When you go to Datacenter> TFA click edit then uncheck Enable,


Screenshot 2022-04-10 071202.jpg







it does not work. you log out and it says you need another authentication form.
so you can't login

Screenshot 2022-04-10 070213.jpg


I then went into nano /etc/pve/user.cfg

removed the X and was able to login.

then tried to enable the check mark in web GUI, logged out and back in again but it never asked me for the TOTP login.
so I went again into nano /etc/pve/user.cfg
and added an X then logged in and it asked me for the TOTP code.

so I do not think the Enable check mark adds or removes the X in nano /etc/pve/user.cfg

thanks for your help in advance

Spiro
 
(I am trying to figure out why this is happening)

but I don't know why...
Is it just my install of PVE?
or
truly a bug ?

Thanks
Kind Regards,
Spiro
 
Hey,

thanks for reporting! I've sent a small patch[1] that should fix the problem.

[1] https://lists.proxmox.com/pipermail/pve-devel/2022-April/052561.html
Hello and thanks for your reply and I am sorry about this - I posted this as a single post to report a bug, before @Fabian_E replied here on another post. since I marked that as Solved.

I thought I would post a clearer picture of what I discovered here hence for the second post. ;)

@Fabian_E created a bug report
https://bugzilla.proxmox.com/show_bug.cgi?id=3989

Kind Regards,
Spiro