SOLVED Disable Two Factor Authentication with SSH from rescue system

[Mario Kos]

Need instructions how to disable 2FA via SSH from linux rescue system.

 

[Mario Kos]

Got stuck after trying:

mv -v /var/cpanel/authn/twofactor_auth/tfa_userdata.json{,.bak}; echo ‘{}’ >> /var/cpanel/authn/twofactor_auth/tfa_userdata.json

Now have a problem:
Internal Server Error
500
Security Policy requires exec termination.

 

[Infopro]

This thread should be helpful for your original issue:
Two-Factor Authentication

 

[Mario Kos]

This thread should be helpful for your original issue:
Two-Factor Authentication

I know about api but can api be called if rescue system is booted?

 

[cPanelMichael]

I know about api but can api be called if rescue system is booted?

Hello,

Two-factor authentication should not prevent you from accessing the server via SSH as root. Once the server is booted out of rescue mode, you'd simply access the server via SSH as root and run those WHM API 1 commands.

Thank you.

 

[Mario Kos]

Firewall is preventing me from accesing, is it possible to disable 2FA from rescue mode?

 

[cPanelMichael]

Hello,

It's unlikely that command will work while the server is booted in rescue mode, but it depends on the OS and the specific boot options you used. You may want to check with your hosting provider to see if they provide an option to disable the firewall rules so you can access the server via SSH.

Thank you.

 

[Mario Kos]

Think local whm or csf is blocking ssh access, can you maybe instruct how to dissable csf from rescue mode?

 

[cPanelMichael]

New Think local whm or csf is blocking ssh access, can you maybe instruct how to dissable csf from rescue mode?

You may find this third-party URL helpful:

How to edit /etc/sysconfig/iptables from: RESCUE MODE boot?

However, running an incorrect command could lead to data loss so it's generally advised to consult with a qualified system administrator or your hosting provider if you are not comfortable in rescue mode.

Thank you.

 

[Mario Kos]

Solved by disabling CSF adding file csf.disable to csf folder.

touch /etc/csf/csf.disable

After reboot managed to SSH login and disable 2FA with whmapi1

whmapi1 twofactorauth_disable_policy