webauth configuration proxmox backup server

[Dataaja95]

hi all
I am trying to configure the webauth proxmox backup server when I add the webauth registry
In the user management for the user I want, I get an error,

An error occurred during token registration.
SecurityError: The operation is insecure.

proxmox pve this error is fixed by setting the domain in the datacenter.cfg file but where do I set this in my pbs server.

Thanks to the proxmox development team for a great backup and virtualization environment, keep up the good work.

 

[dcsapak]

did you mean where you can set the webauthn options for pbs? if yes, this is in the web ui under Configuration -> Other

 

[Dataaja95]

did you mean where you can set the webauthn options for pbs? if yes, this is in the web ui under Configuration -> Other

I have configured the settings in the user interface, still I get
this error. Do I need to specify domain in configuration files like in pve webauth configuration
https://pve.proxmox.com/pve-docs/pve-admin-guide.html#pveum_configure_webauthn

 

[dcsapak]

does the pbs have a valid certificate? which browser do you use?

 

[Dataaja95]

does the pbs have a valid certificate? which browser do you use?

I use a self-signed certificate because pbs is running
on the intranet and I can't use letsencrypt. I have configured a security exception in my browser, so the certificate should be fine. My understanding is that this should work as long as I remember to add the certificate to my trusted browser

 

[dcsapak]

on the intranet and I can't use letsencrypt. I have configured a security exception in my browser, so the certificate should be fine. My understanding is that this should work as long as I remember to add the certificate to my trusted browser

i'm not completely sure what the rules are, i just remember that chrome is a lot stricter than firefox for example

which browser do you use? could you try chrome/firefox (whichever you don't normally use)

 

[Dataaja95]

i'm not completely sure what the rules are, i just remember that chrome is a lot stricter than firefox for example

which browser do you use? could you try chrome/firefox (whichever you don't normally use)

I use Firefox esr version 115. I tried with chromium and it complained invalid domain, with Firefox I get the error I described
An error occurred during token registration.
SecurityError: The operation is insecure.

 

[dcsapak]

what domain do you use to access your pbs and what is the webauthn config there?

 

[Dataaja95]

what domain do you use to access your pbs and what is the webauthn config there?

I do NOT use the domain to connect the pbs but the machine's ip address.
my webauth configuration is
next
Relying party: 192.168.1.8
origing: https://192.168.1.8:8007/
id:192.168.1.8

 

[dcsapak]

I do NOT use the domain to connect the pbs but the machine's ip address.

that won't work in any browser for security reasons

EDIT: i just think so, i did not find any source for that, but i'm pretty sure i could not get it to work with an ip address in the past
does your certificate include the ip address ? does your browser show a security warning?

 

[Dataaja95]

that won't work in any browser for security reasons

EDIT: i just think so, i did not find any source for that, but i'm pretty sure i could not get it to work with an ip address in the past
does your certificate include the ip address ? does your browser show a security warning?

I use the default certificate that comes with the server installation, it contains the ip-
address but it would appear to be 127.0.01, ie
incorrect.