Isaksson / node-red-contrib-unifi

MIT License
50 stars 19 forks source link

multi-factor authentication (MFA) #133

Closed JosepFarreLlados closed 2 months ago

JosepFarreLlados commented 2 months ago

Hello, I just received a communication from Ubiquity Account Team as follows:

" We wanted to extend a reminder that, beginning July 22, 2024, multi-factor authentication (MFA) will be mandatory for all accounts. You may choose an authentication method below, or visit account.ui.com/security.

If you do not have an authentication method configured by the deadline, you will default to email authentication using the registered email on your account. "

I'm looking the setup... Is possible use the multi-factor authentication? image

Thanks in advance.

Isaksson commented 2 months ago

Hello. This node will not be able to use MFA, MFA is only for access when a user login, not like this node, then there must be more like a service account login. I don't think that they will force this on local access accounts, only on the cloud access accounts.

JosepFarreLlados commented 2 months ago

Hello Isaksson, Many thanks for your reply!! Currently I have at my local network running under docker container the following setup:

I have followed the Unifi instructions and I set my unifi cloud account with (MFA). Then I have tested access to unifi through my local network and is requested the MFA code. Also the unifi noder-red unifi node stops (previous to set the unifi MFA was working).

I'm looking at Unifi setup if I can setup a local user, but I can't find the way. It is possible? Thanks in advance. Best regards,

Isaksson commented 2 months ago

Hello. There is a checkbox Restrict to local access only when adding admin to the Unifi system. Then you could add username and password instead of email address.

This is image from Unifi Dream Router, maybe it looks different on other Unifi Console

image

JosepFarreLlados commented 2 months ago

Hello Isaksson, Many thanks for your reply!! I'have a switch USW-Lite-8-PoE and I found that the switch has not and internal console with webserver and the unique way to control the switch is install a console on a computer and then communicate with the switch. Is correct?

In my case I'm using a docker container with the unifi 8.1.113 console to control the switch. When I'm going to add a new user at my unifi container console I don't have the optinon to select only local acess... See my screenshots: image

image

Isaksson commented 2 months ago

Yes, that is correct. You need to have a Controller (Console) installed to be able to mange the devices from this node. If you uncheck the Remote Access, what happens then? it sounds like that would be the same as only local access.

JosepFarreLlados commented 2 months ago

Thanks for your reply Isaksson I'have unchecked the Remote Access and it works, is the same as local access. Let's close the issue. Thanks!!