Unifi: 401s and MFA spam

smugleafdev · January 10, 2025, 1:57pm

My Unifi integration appears to be broken. I set up the integration with a local only admin level user account forever ago, but Unifi updated and now I keep getting MFA emails from Unifi.

HA version: 2025.1.1, problem started months ago though.

My logs are full of these (note the 12002 occurrences ) :

Warning:

(12002 occurrences)
Last logged: 6:48:18 AM

Exception on update Call https://192.168.X.X:443/proxy/network/api/s/default/rest/portforward received 401 Unauthorized

Exception on update Call https://192.168.X.X:443/proxy/network/api/self/sites received 401 Unauthorized

Exception on update Call https://192.168.X.X:443/proxy/network/api/s/default/stat/sysinfo received 401 Unauthorized

Exception on update Call https://192.168.X.X:443/proxy/network/v2/api/site/default/trafficrules received 401 Unauthorized

Exception on update Call https://192.168.X.X:443/proxy/network/api/s/default/rest/wlanconf received 401 Unauthorized

Error:

(2 occurrences)
Last logged: 6:48:13 AM

Error setting up entry Default for unifi
Traceback (most recent call last):
File “/usr/src/homeassistant/homeassistant/config_entries.py”, line 640, in __async_setup_with_context
result = await component.async_setup_entry(hass, self)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File “/usr/src/homeassistant/homeassistant/components/unifi/init.py”, line 52, in async_setup_entry
await hub.initialize()
File “/usr/src/homeassistant/homeassistant/components/unifi/hub/hub.py”, line 88, in initialize
await self.entity_loader.initialize()
File “/usr/src/homeassistant/homeassistant/components/unifi/hub/entity_loader.py”, line 81, in initialize
await self._refresh_api_data()
File “/usr/src/homeassistant/homeassistant/components/unifi/hub/entity_loader.py”, line 102, in _refresh_api_data
await self._refresh_data(self.api_updaters)
File “/usr/src/homeassistant/homeassistant/components/unifi/hub/entity_loader.py”, line 88, in _refresh_data
results = await asyncio.gather(
^^^^^^^^^^^^^^^^^^^^^
…<2 lines>…
)
^
asyncio.exceptions.CancelledError

NathanCu · January 10, 2025, 2:03pm

You said forever ago?

If you have not created a local only account on your unifi gear then that’s the issue. (your old one may be a cloud account you never use in the cloud. If it has an email address it’s cloud.)

cloud account requires MFA. Integration doesn’t work with mfa. (changed mid last year) solution is create a local account on your gear that never connected to cloud and use those creds to connect the integration.

smugleafdev · January 10, 2025, 2:15pm

My HA account for Unifi has:

Restrict to Local Access Only

And on the user list, it’s the only one without an email.

smugleafdev · January 10, 2025, 3:45pm

I just deleted the entire integration and went through the wizard again, and it seems to all be working.

NathanCu · January 10, 2025, 3:48pm

Off and on again - niice!