[PVE-User] Yubico doesn't work anymore

[Thomas Lamprecht]

Hi,

On 3/1/19 11:09 AM, Patrick Westenberg wrote:
> Hi everyone,
> 
> I configured PAM authentication to use yubico but I can't login anymore.
> 
> Mar  1 11:02:23 pve01 pvedaemon[4917]: authentication failure;
> rhost=172.31.0.1 user=root at pam msg=Invalid response from server: 410 Gone
> 
> Is it possible, that the proxmox stuff didn't update their
> implementation as Yubico deactivated deprecated ciphers and non-secured
> traffic?
> 
> https://status.yubico.com/2018/11/26/deprecating-yubicloud-v1-protocol-plain-text-requests-and-old-tls-versions/
> 
> proxmox-ve: 5.3-1 (running kernel: 4.15.18-11-pve)
> pve-manager: 5.3-9 (running version: 5.3-9/ba817b29)
> pve-kernel-4.15: 5.3-2
> pve-kernel-4.15.18-11-pve: 4.15.18-33
> pve-kernel-4.15.18-3-pve: 4.15.18-22
> pve-kernel-4.15.17-1-pve: 4.15.17-9
> corosync: 2.4.4-pve1
> criu: 2.11.1-1~bpo90
> gfs2-utils: 3.1.9-2
> glusterfs-client: 3.8.8-1
> ksm-control-daemon: 1.2-2
> libjs-extjs: 6.0.1-2
> libpve-access-control: 5.1-3
> libpve-apiclient-perl: 2.0-5
> libpve-common-perl: 5.0-46

that's the issue, it should work again with pve-common in version
5.0-47 (or newer) which includes:
https://git.proxmox.com/?p=pve-common.git;a=commit;h=3b3ae60e0934a74b7cc34634740e720d574de3e2

> libpve-guest-common-perl: 2.0-20
> libpve-http-server-perl: 2.0-11
> libpve-storage-perl: 5.0-38
> libqb0: 1.0.3-1~bpo9
> lvm2: 2.02.168-pve6
> lxc-pve: 3.1.0-3
> lxcfs: 3.0.3-pve1
> novnc-pve: 1.0.0-2
> openvswitch-switch: 2.7.0-3
> proxmox-widget-toolkit: 1.0-22
> pve-cluster: 5.0-33
> pve-container: 2.0-34
> pve-docs: 5.3-2
> pve-edk2-firmware: 1.20181023-1
> pve-firewall: 3.0-17
> pve-firmware: 2.0-6
> pve-ha-manager: 2.0-6
> pve-i18n: 1.0-9
> pve-libspice-server1: 0.14.1-2
> pve-qemu-kvm: 2.12.1-1
> pve-xtermjs: 3.10.1-1
> qemu-server: 5.0-46
> smartmontools: 6.5+svn4324-1
> spiceterm: 3.0-5
> vncterm: 1.5-3
> 
> 
> Regards
> Patrick
> _______________________________________________
> pve-user mailing list
> pve-user at pve.proxmox.com
> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>