Skip to Content

Configure Radius 2FA in Ezeelogin Jumpserver

How to enable/disable Radius 2FA  (Two-factor Authentication) in Ezeelogin?

1. Login to Ezeelogin GUI and navigate to Settings -> RADIUS -> RADIUS Settings/Two Factor RADIUS Settings. Provide Radius Host and Shared Secret in the below forms.

2. Navigate to Settings -> General -> Two Factor Authentication -> Enable Radius

3. Navigate to Settings -> General -> Security -> Enable Auto Create User to create the radius in the Ezeelogin gateway server.

4. Navigate Setting -> General -> Authenticatio->  Web Panel Authentication -> RADIUS

4. Re-login to the Ezeelogin GUI with the username and password, it will prompt for radius password/OTP.

Make sure that the gateway user with the same username exists on the radius server.

How to disable Radius 2FA (Two-factor Authentication) from the backend?

Run the below commands to disable and clear google authenticator. Replace username to disable radius for that user.

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings set value='N' where(name='enable_radius_2fa')"

No Two-factor Authentication enabled

This error happens when we enforce Two-Factor authentication without enabling any of the Two-Factor authentications. Run the following command to disable Force Two Factor Authentication.

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings SET value = 0 WHERE name = 'two_factor_auth'"

root@gateway ~]# php /usr/local/ezlogin/ez_queryrunner.php  "update prefix_usergroups SET force_tfa = 'N'"

How to disable Radius 2FA (Two-factor Authentication) from the GUI?

 

Related Articles