Skip to Content

Configure Radius 2FA in Ezeelogin Jumpserver

390  Manu Chacko March 5, 2026  Features & Functionalities, Security Features

Enable or disable Radius 2FA  (Two-factor Authentication) in Ezeelogin

Overview:  This article outlines the process for setting up and managing RADIUS-based Two-Factor Authentication (2FA) in Ezeelogin, including configuration steps via the GUI, and methods for disabling 2FA both from the backend and GUI.

1. Login to Ezeelogin GUI and navigate to Settings -> RADIUS -> RADIUS Settings/Two Factor RADIUS Settings. Provide Radius Host and Shared Secret in the below forms.

2. Navigate to Settings -> General -> Two Factor Authentication -> Enable Radius.

3. Navigate to Settings -> General -> Security -> Enable Auto Create User to create the radius in the Ezeelogin gateway server.

4. Navigate Setting -> General -> Authentication ->  Web Panel Authentication -> RADIUS.

4. Re-login to the Ezeelogin GUI with the username and password, it will prompt for radius password/OTP.

Note: Make sure that the gateway user with the same username exists on the radius server.

How to disable Radius 2FA (Two-factor Authentication) from the GUI.

You can disable Radius by navigating to Settings > General > Two Factor Authentication > Disable Radius.

Emergency CLI Method.

 

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings set value='N' where(name='enable_radius_2fa')"

This error "No Two-Factor Authentication enabled" happens when we enforce Two-Factor authentication without enabling any of the Two-Factor authentications. Run the following command to disable Force Two Factor Authentication.

Disable force two factor authentication globally:

root@gateway:~# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings SET value = 0 WHERE name = 'two_factor_auth'"

Disable force two factor authentication for user group (replace user_group with correct user group):

root@gateway:~# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_usergroups set force_tfa='N' where name='user_group';"

Related Articles:

Enable/Disable two-factor authentication in Ezeelogin

Error: No Two-factor Authentication enabled in GUI

Disable two-factor authentication from backend
Rating: 3.2 (5 Votes)