Disable two factor authentication (2FA Google, Yubikey , Access Keyword, DUO)

How do i disable two factor authentication ( 2FA ) for the admin user and others?

For Ezeelogin Version 7 and above

 

1. To disable two factor authentication ( 2FA ) for admin user, run the following commands.

[email protected]:~# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_settings SET value = 0 WHERE name = 'two_factor_auth'"

 

[email protected]:~# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_users set egs=NULL,eak=NULL,eyk=NULL,set_duo=NULL where id=1"


2. To disable  two factor authentication ( 2FA ) for all users ,run the following command.

[email protected]:~# php /usr/local/ezlogin/ez_queryrunner.php "update prefix_users set egs=NULL,eak=NULL,eyk=NULL,set_duo=NULL"

 

Abbreviations:
   eak       = Access Keyword
   eyk       = Yubikey
   egs       = Google Authenticator
   set_duo = DUO 2FA     

 

 

For Ezeelogin Version 6 and below

 

1. Find database name and database prefix from /usr/local/etc/ezlogin/ez.conf in ezeelogin gateway server.

[email protected]:~# cat /usr/local/etc/ezlogin/ez.conf

system_folder /var/www/ezlogin/

force_https yes

uri_path /

db_host localhost

db_port /var/run/mysqld/mysqld.sock

db_name ezlogin_por

db_user ezlogin_cxy

db_pass ymhbtPaY)VzD2g]84

db_prefix casmbn_

cookie_encryption_key D8$Frp5fF_FF

cookie_name rlbup

cookie_path /

www_folder /var/www/html/ezlogin/

admin_user ezadmin

mysql_encrypt no


2. Login to mysql command prompt

Replace the "db_user" &  "dn_name" with values in  /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server.You can find the db password as "db_pass" in /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server.

[email protected]:~# mysql -u db_user -p db_name

4. Run the following command to  two factor authentication ( 2FA ) for admin user

Replace "dbprefix_" with the value of dbprefix_ in  /usr/local/etc/ezlogin/ez.conf of your ezeelogin jump server. For example "dbprefix_settings" is to be replaced with "casmbn_settings" here.

UPDATE dbprefix_settings SET value = 0 WHERE name = 'two_factor_auth' ;

UPDATE dbprefix_users SET egs=NULL,eak=NULL,eyk=NULL,set_duo=NULL where id=1;


Run the following command two factor authentication ( 2FA ) for all users.

UPDATE dbprefix_users SET egs=NULL,eak=NULL,eyk=NULL,set_duo=NULL;

 

 you have to use correct db_name and dbprefix from ez.conf if you are running the mysql commands manually.

0 (0)
Article Rating (No Votes)
Rate this article
    Attached Files
    There are no attachments for this article.
    Related Articles RSS Feed
    License cache outdated but its not time yet
    Viewed 1391 times since Wed, Jun 14, 2017
    Configure Automatic su or sudo
    Viewed 2837 times since Thu, Jun 15, 2017
    setup web ssh console in ezeelogin and ssh via browser
    Viewed 4912 times since Tue, Jan 30, 2018
    Error: User add failed. Cannot add user on this node: FAILED: to establish SSH session
    Viewed 525 times since Thu, Sep 6, 2018
    Could not setup Ezeelogin Web SSH service in ssh jumphost
    Viewed 720 times since Fri, Feb 16, 2018
    vzctl enter veid fails. Unable to get term attr: Invalid argument
    Viewed 1870 times since Wed, Jun 14, 2017
    usernames already exists
    Viewed 199 times since Fri, Mar 15, 2019
    unable to ssh because ip not allowed because none of user’s groups are listed in AllowGroups
    Viewed 7283 times since Thu, Jun 15, 2017
    Unable to open ssh session
    Viewed 1883 times since Thu, Jun 15, 2017
    Unable to add server into Ezeelogin via webinterface. Password error, times out
    Viewed 1495 times since Wed, Jun 14, 2017