Wedmin integration not supporting second factor authentication

[vincegre]

The problem

webmin integration doesn't support 2FA and it's nearly mandatory now all the more for servers with Webmin to prevent illegal login attempts !

What version of Home Assistant Core has the issue?

2024.4.4

What was the last working version of Home Assistant Core?

n/a

What type of installation are you running?

Home Assistant OS

Integration causing the issue

webmin

Link to integration documentation on our website

https://www.home-assistant.io/integrations/webmin

Diagnostics information

n/a

Example YAML snippet

No response

Anything in the logs that might be useful for us?

No response

Additional information

No response

[home-assistant]

Hey there @autinerd, mind taking a look at this issue as it has been labeled with an integration (webmin) you are listed as a code owner for? Thanks!

Code owner commands

Code owners of webmin can trigger bot actions by commenting:

• @home-assistant close Closes the issue.
• @home-assistant rename Awesome new title Renames the issue.
• @home-assistant reopen Reopen the issue.
• @home-assistant unassign webmin Removes the current integration label and assignees on the issue, add the integration domain after the command.
• @home-assistant add-label needs-more-information Add a label (needs-more-information, problem in dependency, problem in custom component) to the issue.
• @home-assistant remove-label needs-more-information Remove a label (needs-more-information, problem in dependency, problem in custom component) on the issue.

_{^{(message by CodeOwnersMention)}}

---

webmin documentation
webmin source
_{^{(message by IssueLinks)}}

[autinerd]

Hello,

the Webmin API doesn't support 2FA, in fact the API access ignores 2FA completely, you can use the API with only username and password even when 2FA is enabled.

For the best security, please create a dedicated Webmin user with a strong password and enable RPC calls for this user (you can also enable that login is only allowed from the Home Assistant IP address), while disabling RPC calls for all other users.

I will put the information into the integration documentation, thanks.

[vincegre]

@autinerd thanks for clarifications and explanations, I have setup it properly now with one of my servers, will continue in weekend with others ;)
For integration documentation I would be happy to do that if it's ok for you ? ;)
Also do you plan to add some additional sensors in the integration ?

[autinerd]

Also do you plan to add some additional sensors in the integration ?

Yes, there is an open PR for the next step: #112660