1

I'm trying to secure my firewall machine by enabling OPT for Opnsense. At a glance, it seems straight forward, see https://wiki.opnsense.org/manual/how-tos/two_factor.html. However, it doesn't seem to be working as intended, the authentication fails when the OTP token is included although it works fine using the builtin Tester.

Auth Servers: enter image description here

OTP Configuration: enter image description here

OTP Configuration for root user: enter image description here

Auth Servers OTP Configuration OTP Configuration for root user

Is there an extra step that I'm missing here?

Improve this question

1 Answer 1

Reset to default
1

After a few hours looking at the source code and clever google'ing, I stumbled upon hard to find solution:

Source: https://forum.opnsense.org/index.php?topic=9690.msg44232#msg44232

Step 6 is a bit unclear. You need to change the appropriate service (IPsec, Captive Portal, Web Proxy, OpenVPN or web GUI) to use the TOTP server.

For the web GUI the setting is under System: Settings: Administration: Authentication Server.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.