- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: SmartConsole MFA - Google Authenticator
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SmartConsole MFA - Google Authenticator
Hi,
We are trying to implement MFA login to SmartConsole with Google Authenticator but with no luck. Everything when smooth with Gaia Portal, but SmartConsole fails to authenticate (the same configuration is applied to both).
Best regards,
RZ
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Would you please share more details? Specifically, configuration you have on both, and the version in use?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Also, look to this post and the document attached there, to check you are configuring it the same way: https://community.checkpoint.com/t5/General-Topics/MFA-with-Google-Authenticator/td-p/39456
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That's the manual I used when configuring MFA in Gaia Portal and also SmartConsole. Gaia works fine, SmartConsole (R80.40) not. When trying to authenticate using Password+Code in the Password field in SmartConsole I get:
radiusd(pam_google_authenticator)[11610]: Invalid verification code for xxxx
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Got it. @Vladimir what do you think? It is your setup 🙂
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There were updates in the thread by members adopting my solution describing some changes to the freeradius configuration dependent on Ubuntu releases. Were those taken into consideration?
I may have to re-run this setup on R81.10 and current Ubuntu LTS at some point. Looks like it may still be relevant for some folks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would start with looking into the actual radius requests and answers between SMS and the Ubuntu here.