If oath or U2F is set, it should not be possible to change it in the GUI on the user edit window. It disables the second factor, but leave the tfa key behind in the file tfa.cfg. The key in the tfa.cfg file is a problem when the user tries to recreate a key. The old key must be deleted before a new one can be created. --- www/manager6/dc/UserEdit.js | 5 +++++ 1 file changed, 5 insertions(+)
diff --git a/www/manager6/dc/UserEdit.js b/www/manager6/dc/UserEdit.js index 1665f4b0..40c4044f 100644 --- a/www/manager6/dc/UserEdit.js +++ b/www/manager6/dc/UserEdit.js @@ -198,6 +198,11 @@ Ext.define('PVE.dc.UserEdit', { } } me.setValues(data); + if (data.keys) { + if ( data.keys === 'x!oath' || data.keys === 'x!u2f' ) { + me.down('[name="keys"]').setDisabled(1); + } + } } }); } -- 2.20.1 _______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel