Hello,
I have tried to set up my YubiKey to the Reseller account after I linked it but I got the message that the key is already used for one account.
I would like to use the YubiKey for several accounts (admin, reseller, domains) in order to have higher security level for all of them. Perhaps another setting (use key just for one accound <-> allow key for several accounts) would be helpful for others too?
Regards Jörg
Currently, it is not permitten to associate a YubiKey to more than one i-MSCP account.
You can always associate your YubiKey with the administrator account and from the administrator account, simply switch to the other interfaces.
We cannot allow a user to associate one YubiKey to several i-MSCP accounts because the plugin is also supporting 1FA (YubiKey only) OTP authentication. In such setup, the YubiKey unique identifier is used by the OTP authentication handler to retrieve the i-MSCP account identity (one YubiKey identifier map to one identity). If we start to link a YubiKey to several accounts (hence, to more than one identity), there will be ambiguous identity problems.
I'll allow this in later version by asking user for credentials (even if 1FA is enabed) when there is ambiguous identity.
Fixed in my local repository. You'll be able to associate one YubiKey to many identities (i-MSCP account) with the next YubiKeyAuth plugin version. CHANGELOG will be as follow:
UPDATE.md