tiran133

[guide] keycloak authentication for proxmox

How to setup Proxmox to use Keycloak as authentication realm.

Proxmox Setup

root@proxmox:/etc/pve# cat domains.cfg
pam: pam
        comment Linux PAM standard authentication

Exporting your 2FA tokens from Authy to transfer them into another 2FA application

IMPORTANT - Update regarding deprecation of Authy desktop apps

Past August 2024, Authy stopped supported the desktop version of their apps:
See Authy is shutting down its desktop app | The 2FA app Authy will only be available on Android and iOS starting in August for details.

And indeed, after a while, Authy changed something in their backend which now prevents the old desktop app from logging in. If you are already logged in, then you are in luck, and you can follow the instructions below to export to tokens.

If you are not logged in anymore, but can find a backup of the necessary files, then restore those files, and re-install Authy 2.2.3 following the instructions below, and it should work as expected.

UFW

I use Ubuntu’s Uncomplicated firewall because it is available on Ubuntu and it's very simple.

Install UFW

if ufw is not installed by default be sure to install it first.

	# ~/.zshrc file for zsh non-login shells.
	# see /usr/share/doc/zsh/examples/zshrc for examples

	setopt autocd # change directory just by typing its name
	#setopt correct # auto correct mistakes
	setopt interactivecomments # allow comments in interactive mode
	setopt ksharrays # arrays start at 0
	setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’
	setopt nonomatch # hide error message if there is no match for the pattern
	setopt notify # report the status of background jobs immediately

	# Set the name and the supported language of the project
	PROJECT(hello-world C)
	# Set the minimum version of cmake required to build this project
	CMAKE_MINIMUM_REQUIRED(VERSION 3.0)

	### We need this in order to find CMake modules located in this directory
	set ( CMAKE_MODULE_PATH ${CMAKE_MODULE_PATH} ${CMAKE_SOURCE_DIR} )

	include ( LinuxAppImageBuild )

	project(regex)

	cmake_minimum_required(VERSION 2.8)

	# For some external project macros
	include(ExternalProject)

	# Download boost from git and build regex module

	ExternalProject_Add(

	#include <cstring>
	#include <cerrno>
	#include <cstdio>

	#include <iostream>
	#include <deque>
	#include <vector>
	#include <thread>
	#include <mutex>
	#include <chrono>

	# Thanks to @danger89 and @Ilothar for updating the gist.
	# Set the name and the supported language of the project
	project(hello-world C CXX)

	# Set the minimum version of cmake required to build this project
	cmake_minimum_required(VERSION 3.10)

	# Use the package PkgConfig to detect GTK+ headers/library files
	find_package(PkgConfig REQUIRED)
	pkg_check_modules(GTK REQUIRED gtkmm-3.0)

	#include "StdAfx.h"

	#include <Setupapi.h>
	#pragma comment(lib, "Setupapi.lib")

	#include "SerialPort.h"

	SerialPort::SerialPort(void) : end_of_line_char_('\n')
	{
	}