Is it possible to skip F2A question for specific addresses, if F2A is enabled?

[Vitusware]

SYSTEM INFORMATION
OS type and version	Ubuntu Linux 24.04.2
Virtualmin version	7.30.8
Kernel and CPU	Linux 6.8.0-60-generic on x86_64
Processor information	Intel(R) Core™ i5-2400 CPU @ 3.10GHz, 4 cores

Hi all,

Just a quick question that’s been puzzling me for some time now.

I’ve been using Virtualmin for a some time now
and I just have upgraded my system from CentOS 7 to Ubuntu Linux 24.04.2.
(CentOS 7 is end of life, CentOS 10 is not a good idea so, got into Ubuntu.)

After installing the newest version of Virtualmin I got more features to use -Happy chirps!-
And WOW, this thing is going like a rocket and I’m very surprised how smooth things are.
I got everything working in no time, even the F2A is working like a charm.

so very happy camper over here

But just one small issue that keeps popping up. (more like a nuisance to me personally TBH)

I have access for the internet, so good reason to set up the F2A,
But when I’m connection from my local (in house) network, there isn’t really a reason to have the F2A active, IMHO.
Can is disable or skip the F2A if I’m connection for one particular system or IP address?

So, and I have looked for it, searched for it, can’t find it..
is this even possible?

Just a little question for a very enthusiastic user that just want to make things a little bit easier

And yes, i do consider myself still a newbie
Please and thank you.
Eduard

[Joe]

No, there’s no option to skip 2FA for some IP addresses at this time. Though your session can last semi-permanently, so you only need to login once every once in a while.

[Vitusware]

Thank for your fast answer Joe.

I was afraid that might be the case -lol

I have to revalidate every time, since I always nicely; log out
Then again, if you want your security tight, that’s what you get.

I might have to reconsider, logging out every time though, that might give me a bit of ease.

Thanks again for your reply and this tip, this might do the trick.

-Eduard

[Joe]

I think you only need to worry about staying logged in if you’re logged in on a non-trusted computer or will have random people in and out of the location. I lock my computer when I walk away, but don’t log out of everything.

[Vitusware]

Yea, that’s not the case here.
I’m the only one using this computer.

Just a habit I have, left over from my work as a system operator at the college I worked.
Old habits don’t easily change

But I might try and do just that, not logout.. but it’'s hard not to -lol-

[Vitusware]

Yes, I know..

I was a system operator at a college I used to work an had a system that could do just that,
system based.
So I did only have to enter my F2A code when I accessing trough any machine but my personal one in my office.
This system was only accessible by me, in my personal; office of which I had the only access key.
and had to login to.. so that was secure enough

But I hear you, it IS a thin line between convenience and insecurity, I agree totally

That’s why I ALWAYS logout closing Virtualmin and need to login again, with F2A,
not just closing the browser.

Which I understand would be a better option in this case.

Anyways, thank you for tuning in, your opinion is appreciated

[Vitusware]

Hey Everyone,

Just found out, closing the browser even not logging out doesn’t work. I need to login whenever I reopen the browser.

So I’ll just be giving the F2A code every time I log in.

I would have been nice, even just a 30 day grace or something, but unfortunately peanut butter (Yes I’m Dutch-haha).

Thanks again for the interest and your best intentions.
-Eduard

[Stegan]

@Vitusware

closing the browser even not logging out doesn’t work.

Which browser? I use Chrome and Mozilla and both remain logged in when closed (even when I power off my laptop) - that could be due to some of the extensions applied to them of course.

I’m also one who has got used to pulling my Yubikey out when I leave the keyboard!

[Vitusware]

@Stegan

Which browser? I use Chrome and Mozilla and both remain logged in when closed (even when I power off my laptop) - that could be due to some of the extensions applied to them of course.

HI Stegan, thanks for your thoughts about this.

Actually, when I try it now, it does work, now that is verry curious..
I’ll check it again when I reboot my computer. and come back on this.
I use Chrome as well, not sure why it didn’t work before

[Vitusware]

@Vitusware

I’ll check it again when I reboot my computer. and come back on this.

It works!
Don’t know what changed this behaviour as it didn’t before..

Is it possible that is has something to do with the change from CentOS to Ubuntu?
and a newer version of Virtualmin?

As I said earlier I automatically click logoff when I’m leaving Virtualmin, it’s automatic..
so It’s very good possible I did click logout earlier trying this

But anyway, it does work now, Thanks for the comments everyone, most appreciated

-Eduard

[Vitusware]

And then it did not work anymore..

But I figured out why.

If you don’t tick the remember me box..

You session will be disconnected at the moment you disconnect.

and you will have to login ethe next time.

I might be stating the obvious here.. but this is crucial information.

if there is no check box, it can’t be done:
In webmin configuration → Authentication:

Gonna test this hypothesis right after I post this (because my browser keeps the session alive

Edit: Yep, you need to login when you didn’t check the box.
And when there’s no box.. well.. you need to login again as well

[Stegan]

@Vitusware

Yep, you need to login when you didn’t check the box.

I never bother - but somehow it still remembers me