#4592 Two Factor Authentication gets ignored...

[xangr]

Webmin ignore Two-Factor Authentication when i try to login. If i pur 6-digit number (randomly) webmin successfully log me in to the system.

I tried root user and also created webmin user manually called "xang". Both of them are logged in without 2FA.

Is there something wrong?

Note: Webmin is newly installed.

[xangr]

[02/May/2015:09:17:55 -0400] miniserv.pl started
[02/May/2015:09:17:55 -0400] Using MD5 module Digest::MD5
[02/May/2015:09:17:55 -0400] PAM authentication enabled
Use of uninitialized value $acl::in{"user"} in concatenation (.) or string at /usr/share/webmin/acl/twofactor_form.cgi line 50.
Use of uninitialized value $secret in pattern match (m//) at /usr/share/webmin/webmin/webmin-lib.pl line 2378.
Use of uninitialized value in split at ./acl-lib.pl line 625.
[02/May/2015:09:17:58 -0400] Reloading configuration
[[02/May/2015:09:18:02 -040002/May/2015:09:18:02 -0400] ] [[1.1.1.11.1.1.1] ] Document followsDocument follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.
: This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

[[02/May/2015:09:18:02 -040002/May/2015:09:18:02 -0400[] ] [02/May/2015:09:18:02 -04001.1.1.1[] 1.1.1.1Document follows] : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.
] Document follows
[ : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.
1.1.1.1
] Document follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

[02/May/2015:09:18:02 -0400] [1.1.1.1] Document follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

[02/May/2015:09:18:35 -0400] [1.1.1.1] Document follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

[02/May/2015:09:18:35 -0400] [1.1.1.1] Document follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

[02/May/2015:09:18:37 -0400] [1.1.1.1] Document follows : This web server is running in SSL mode. Try the URL https://domain.com:43699/ instead.

Perl failure : Can't locate object method "new" via package "Digest::SHA1" at /usr/share/perl5/Digest/HMAC.pm line 17.

Use of uninitialized value $cat in concatenation (.) or string at /usr/share/webmin/gray-theme/index.cgi line 29.
Use of uninitialized value $gconfig{"nofeedbackcc"} in numeric ne (!=) at /usr/share/webmin/gray-theme/left.cgi line 90.

[Jamie Cameron]

Did you enable two-factor for this user in the Webmin Users module, as well as enabling two-factor globally in the Webmin Configuration module?