Hi, there was an announcement by yubico a while ago regarding the shutdown of older ciphers/api, etc.
I added the following URL as Yubico URL for the respective authentication type (where you also add your API key, PVE 4.4-24): https://api.yubico.com/wsapi/2.0/verify Regards, Matthieu Am 01.03.19 um 11:29 schrieb Thomas Lamprecht: > Hi, > > On 3/1/19 11:09 AM, Patrick Westenberg wrote: >> Hi everyone, >> >> I configured PAM authentication to use yubico but I can't login anymore. >> >> Mar 1 11:02:23 pve01 pvedaemon[4917]: authentication failure; >> rhost=172.31.0.1 user=root@pam msg=Invalid response from server: 410 Gone >> >> Is it possible, that the proxmox stuff didn't update their >> implementation as Yubico deactivated deprecated ciphers and non-secured >> traffic? >> >> https://status.yubico.com/2018/11/26/deprecating-yubicloud-v1-protocol-plain-text-requests-and-old-tls-versions/ >> >> proxmox-ve: 5.3-1 (running kernel: 4.15.18-11-pve) >> pve-manager: 5.3-9 (running version: 5.3-9/ba817b29) >> pve-kernel-4.15: 5.3-2 >> pve-kernel-4.15.18-11-pve: 4.15.18-33 >> pve-kernel-4.15.18-3-pve: 4.15.18-22 >> pve-kernel-4.15.17-1-pve: 4.15.17-9 >> corosync: 2.4.4-pve1 >> criu: 2.11.1-1~bpo90 >> gfs2-utils: 3.1.9-2 >> glusterfs-client: 3.8.8-1 >> ksm-control-daemon: 1.2-2 >> libjs-extjs: 6.0.1-2 >> libpve-access-control: 5.1-3 >> libpve-apiclient-perl: 2.0-5 >> libpve-common-perl: 5.0-46 > > that's the issue, it should work again with pve-common in version > 5.0-47 (or newer) which includes: > https://git.proxmox.com/?p=pve-common.git;a=commit;h=3b3ae60e0934a74b7cc34634740e720d574de3e2 > >> libpve-guest-common-perl: 2.0-20 >> libpve-http-server-perl: 2.0-11 >> libpve-storage-perl: 5.0-38 >> libqb0: 1.0.3-1~bpo9 >> lvm2: 2.02.168-pve6 >> lxc-pve: 3.1.0-3 >> lxcfs: 3.0.3-pve1 >> novnc-pve: 1.0.0-2 >> openvswitch-switch: 2.7.0-3 >> proxmox-widget-toolkit: 1.0-22 >> pve-cluster: 5.0-33 >> pve-container: 2.0-34 >> pve-docs: 5.3-2 >> pve-edk2-firmware: 1.20181023-1 >> pve-firewall: 3.0-17 >> pve-firmware: 2.0-6 >> pve-ha-manager: 2.0-6 >> pve-i18n: 1.0-9 >> pve-libspice-server1: 0.14.1-2 >> pve-qemu-kvm: 2.12.1-1 >> pve-xtermjs: 3.10.1-1 >> qemu-server: 5.0-46 >> smartmontools: 6.5+svn4324-1 >> spiceterm: 3.0-5 >> vncterm: 1.5-3 >> >> >> Regards >> Patrick >> _______________________________________________ >> pve-user mailing list >> [email protected] >> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user >> > > > _______________________________________________ > pve-user mailing list > [email protected] > https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user > _______________________________________________ pve-user mailing list [email protected] https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
