1

I'm trying to secure my firewall machine by enabling OPT for Opnsense. At a glance, it seems straight forward, see https://wiki.opnsense.org/manual/how-tos/two_factor.html. However, it doesn't seem to be working as intended, the authentication fails when the OTP token is included although it works fine using the builtin Tester.

Auth Servers: enter image description here

OTP Configuration: enter image description here

OTP Configuration for root user: enter image description here

Auth Servers OTP Configuration OTP Configuration for root user

Is there an extra step that I'm missing here?

|improve this question
1

After a few hours looking at the source code and clever google'ing, I stumbled upon hard to find solution:

Source: https://forum.opnsense.org/index.php?topic=9690.msg44232#msg44232

Step 6 is a bit unclear. You need to change the appropriate service (IPsec, Captive Portal, Web Proxy, OpenVPN or web GUI) to use the TOTP server.

For the web GUI the setting is under System: Settings: Administration: Authentication Server.

|improve this answer

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.