{"id":36873,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/server-dvuhfaktornoj-avtorizatsii-linotp\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"server-dvuhfaktornoj-avtorizatsii-linotp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","title":{"rendered":"LinOTP two-factor authorization server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"LinOTP
\n
\nToday I want to share how to set up a two-factor authentication server to protect the corporate network, websites, services, and SSH. The setup will include: LinOTP + FreeRadius. <\/p>\n

Why do we need it?
\nIt is a completely free, convenient solution within your network, independent of third-party providers.<\/p>\n

This service is quite convenient, very visual compared to other open-source products, and supports a vast array of functions and policies (For example, login + password + (PIN + OTPToken)). It integrates via API with SMS sending services (LinOTP Config->Provider Config->SMS Provider), generates codes for mobile apps like Google Authenticator, and much more. I find it more convenient than the service discussed in article<\/a><\/noindex>.<\/p>\n

This server works excellently with Cisco ASA, OpenVPN servers, Apache2, and basically anything that supports authentication through a RADIUS server (e.g., for SSH in data centers).<\/p>\n

Required:<\/p>\n

1) Debian 8 (Jessie) \u2014 Absolutely!<\/b> (the trial installation on Debian 9 is described at the end of the article)<\/p>\n

Beginning:<\/p>\n

We install Debian 8.
\n<\/a><\/noindex>
\nAdd the LinOTP repository:<\/p>\n

# echo 'deb http:\/\/www.linotp.org\/apt\/debian jessie linotp' > \/etc\/apt\/sources.list.d\/linotp.list<\/code><\/pre>\n
\nAdd the keys:<\/p>\n
# gpg --search-keys 913DFF12F86258E5<\/code><\/pre>\n
\nSometimes, during a 'clean' installation, after executing this command, Debian outputs: <\/p>\n
gpg: created directory `\/root\/.gnupg'\ngpg: created new configuration file `\/root\/.gnupg\/gpg.conf'\ngpg: WARNING: options in `\/root\/.gnupg\/gpg.conf' are not yet active this run\ngpg: created keyring `\/root\/.gnupg\/secring.gpg'\ngpg: created keyring `\/root\/.gnupg\/pubring.gpg'\ngpg: no keyservers are configured (use --keyserver)\ngpg: keyserver search failed: bad URI\n<\/code><\/pre>\n
\nThis is the initial setup of gnupg. Nothing to worry about. Just execute the command again.
\nTo Debian's question:<\/p>\n
gpg: searching '913DFF12F86258E5' at hkp server keys.gnupg.net\n(1)\tLSE LinOTP2 Packaging \n\t  2048 bit RSA key F86258E5, created: 2010-05-10\nKeys 1-1 of 1 for '913DFF12F86258E5'. Enter numbers, N) Next or Q) Quit><\/code><\/pre>\n
\nWe reply: 1<\/p>\n
Next: <\/p>\n
# gpg --export 913DFF12F86258E5 | apt-key add -<\/code><\/pre>\n
<\/p>\n
# apt-get update<\/code><\/pre>\n
\nWe install MySQL. In theory, another SQL server can be used, but for simplicity, I will use it as recommended for LinOTP.<\/p>\n
(additional information, including reconfiguring the LinOTP database, can be found in the official documentation for this link<\/a><\/noindex>. There, you can find the command: dpkg-reconfigure linotp to change parameters if you have already installed MySQL).<\/p>\n
# apt-get install mysql-server<\/code><\/pre>\n
<\/p>\n
# apt-get update<\/code><\/pre>\n
 (double-checking for updates won't hurt)
\nWe install LinOTP and additional modules:<\/p>\n
# apt-get install linotp<\/code><\/pre>\n
\nWe answer the installer\u2019s questions: 
\nUse Apache2: yes
\nCreate a password for the admin LinOTP: 'YourPassword'
\nGenerate a self-signed certificate?: yes
\nUse MySQL?: yes
\nWhere is the database located: localhost
\nCreating the LinOTP database (database name) on the server: LinOTP2
\nCreating a separate user for the database: LinOTP2
\nSet a password for the user: \"YourPassword\"
\nShould we create the database now? (something like 'Are you sure you want to \u2026'): yes
\nEnter the root password for MySQL that you created during installation: \"YourPassword\"
\nDone.<\/p>\n
(optional, can also skip)<\/p>\n
# apt-get install linotp-adminclient-cli <\/code><\/pre>\n
\n(optional, can also skip)<\/p>\n
# apt-get install libpam-linotp  <\/code><\/pre>\n
\nAnd so, our Linotp web interface is now available at the address: <\/p>\n
"<b>https<\\\/b>: \\\/\\\/IP_server\\\/manage"<\/code><\/pre>\n
\nI will tell you about the settings in the web interface a bit later.<\/p>\n
Now, the most important thing! We need to start FreeRadius and link it with Linotp.<\/p>\n
Installing FreeRadius and the LinOTP working module<\/p>\n
# apt-get install freeradius linotp-freeradius-perl<\/code><\/pre>\n
\nBacking up the client and Users configurations of the radius.<\/p>\n
# mv \/etc\/freeradius\/clients.conf  \/etc\/freeradius\/clients.old<\/code><\/pre>\n
<\/p>\n
# mv \/etc\/freeradius\/users  \/etc\/freeradius\/users.old<\/code><\/pre>\n
\nCreating an empty client file:<\/p>\n
# touch \/etc\/freeradius\/clients.conf<\/code><\/pre>\n
\nEditing our new config file (the backed-up config can be used as an example)<\/p>\n
# nano \/etc\/freeradius\/clients.conf<\/code><\/pre>\n
<\/p>\n
client 192.168.188.0\/24 {\nsecret  = passwd # password for client connections\n}<\/code><\/pre>\n
\nNext, create the users file:<\/p>\n
# touch \/etc\/freeradius\/users<\/code><\/pre>\n
\nEditing the file to tell the radius that we will use Perl for authentication.<\/p>\n
# nano \/etc\/freeradius\/users<\/code><\/pre>\n
<\/p>\n
DEFAULT Auth-type := perl<\/code><\/pre>\n
\nNext, edit the file \/etc\/freeradius\/modules\/perl<\/p>\n
# nano \/etc\/freeradius\/modules\/perl<\/code><\/pre>\n
\nWe need to specify the path to the linotp Perl script in the module parameter: <\/p>\n
Perl { .......\n.........\nmodule = \/usr\/lib\/linotp\/radius_linotp.pm<\/code><\/pre>\n
\n\u2026\u2026
\nNext, we create a file in which we specify where to get the data from (domain, database, or file).<\/p>\n
# touch \/etc\/linotp2\/rlm_perl.ini<\/code><\/pre>\n
<\/p>\n
# nano \/etc\/linotp2\/rlm_perl.ini<\/code><\/pre>\n
<\/p>\n
URL=https:\/\/IP_of_your_LinOTP_server(192.168.X.X)\/validate\/simplecheck\nREALM=webusers1c\nRESCONF=LocalUser\nDebug=True\nSSL_CHECK=False<\/code><\/pre>\n
\nHere, I will stop for a moment, as this is important:<\/p>\n
Full description of the file with comments:
\n#IP of the linotp server (IP \u0430\u0434\u0440\u0435\u0441 \u043d\u0430\u0448\u0435\u0433\u043e LinOTP \u0441\u0435\u0440\u0432\u0435\u0440\u0430)
\nURL=https:\/\/172.17.14.103\/validate\/simplecheck
\n#\u041d\u0430\u0448\u0430 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0432 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 LinOTP.)
\nREALM=rearm1
\n#\u0418\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u044e\u0437\u0432\u0435\u0440\u0435\u0439 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0431\u043c\u043e\u0440\u0434\u0435 LinOTP.
\nRESCONF=flat_file
\n#optional: comment out if everything seems to work fine
\nDebug=True
\n#optional: use this, if you have selfsigned certificates, otherwise comment out (SSL \u0435\u0441\u043b\u0438 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u0445\u043e\u0442\u0438\u043c \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c)
\nSSL_CHECK=False<\/p>\n
Next, we will create the file \/etc\/freeradius\/sites-available\/linotp<\/p>\n
# touch \/etc\/freeradius\/sites-available\/linotp<\/code><\/pre>\n
<\/p>\n
# nano \/etc\/freeradius\/sites-available\/linotp<\/code><\/pre>\n
\nAnd copy the config into it (no edits needed):<\/p>\n
authorize {\n#normalizes malformed client request before handed on to other modules (see '\/etc\/freeradius\/modules\/preprocess')\npreprocess\n#  If you are using multiple kinds of realms, you probably\n#  want to set \"ignore_null = yes\" for all of them.\n#  Otherwise, when the first style of realm doesn't match,\n#  the other styles won't be checked.\n#allows a list of realm (see '\/etc\/freeradius\/modules\/realm')\nIPASS\n#understands something like USER@REALM and can tell the components apart (see '\/etc\/freeradius\/modules\/realm')\nsuffix\n#understands USERREALM and can tell the components apart (see '\/etc\/freeradius\/modules\/realm')\nntdomain\n#  Read the 'users' file to learn about special configuration which should be applied for\n# certain users (see '\/etc\/freeradius\/modules\/files')\nfiles\n# allows to let authentication to expire (see '\/etc\/freeradius\/modules\/expiration')\nexpiration\n# allows to define valid service-times (see '\/etc\/freeradius\/modules\/logintime')\nlogintime\n# We got no radius_shortname_map!\npap\n}\n#here the linotp perl module is called for further processing\nauthenticate {\nperl\n}<\/code><\/pre>\n
\nNext, we will create a symlink:<\/p>\n
# ln -s ..\/sites-available\/linotp \/etc\/freeradius\/sites-enabled<\/code><\/pre>\n
\nPersonally, I eliminate default Radius sites, but if you need them, you can either edit their config or disable it.<\/p>\n
# rm \/etc\/freeradius\/sites-enabled\/default<\/code><\/pre>\n
<\/p>\n
# rm \/etc\/freeradius\/sites-enabled\/inner-tunnel<\/code><\/pre>\n
<\/p>\n
# service freeradius reload<\/code><\/pre>\n
\nNow let's return to the web interface and examine it in more detail:
\nIn the upper right corner, click LinOTP Config -> UserIdResolvers -> New
\nChoose what we want: LDAP (AD win, LDAP samba), SQL, or local system users Flatfile. <\/p>\n
Fill in the required fields.<\/p>\n
Next, let's create REALMS:
\nIn the upper right corner, click LinOTP Config -> Realms -> New. 
\nand give our REALM a name, and also click on the previously created UserIdResolvers.<\/p>\n
All this data is needed by freeRadius in the file \/etc\/linotp2\/rlm_perl.ini, as I mentioned above, so if you haven't edited it yet, please do so now.<\/p>\n
All servers are configured.<\/p>\n
The vulnerability is confirmed in many official Docker images, including images for Couchbase, Elasticsearch, Flink, Solr, Storm, etc.<\/p>\n
Setting up LinOTP on Debian 9<\/b>:<\/p>\n
Installation: <\/p>\n
# echo 'deb http:\/\/linotp.org\/apt\/debian stretch linotp' > \/etc\/apt\/sources.list.d\/linotp.list <\/code><\/pre>\n
# apt-get install dirmngr<\/code><\/pre>\n
<\/p>\n
# apt-key adv --recv-keys 913DFF12F86258E5\n<\/code><\/pre>\n
# apt-get update<\/code><\/pre>\n
<\/p>\n
# apt-get install mysql-server<\/code><\/pre>\n
 (by default, in Debian 9 mysql (mariaDB) does not offer to set a root password; of course, you can leave it empty, but if you've been reading the news, this often leads to 'epic fails', so we will set it after all)<\/p>\n
# mysql -u root -p<\/code><\/pre>\n
use mysql;<\/code><\/pre>\n
UPDATE user SET Password = PASSWORD('your_password_here') WHERE User = 'root';\n<\/code><\/pre>\n
sigreturn<\/code><\/pre>\n
# apt-get install linotp<\/code><\/pre>\n
# apt-get install linotp-adminclient-cli<\/code><\/pre>\n
# apt-get install python-ldap<\/code><\/pre>\n
# apt install freeradius<\/code><\/pre>\n
# nano \/etc\/freeradius\/3.0\/sites-enabled\/linotp<\/code><\/pre>\n
Insert the code (sent by JuriM, thanks to him!):<\/p>\n
server linotp {
\nlisten {
\n ipaddr = *
\n port = 1812
\n type = auth
\n}
\nlisten {
\n ipaddr = *
\n port = 1813
\n type = acct
\n}
\nauthorize { 
\n preprocess
\n update { 
\n &control:Auth-Type := Perl
\n } 
\n} 
\nauthenticate {
\n Auth-Type Perl {
\n perl
\n }
\n}
\naccounting {
\n unix
\n}
\n}<\/p><\/blockquote>\n
Edit \/etc\/freeradius\/3.0\/mods-enabled\/perl<\/p>\n
perl {
\n filename = \/usr\/share\/linotp\/radius_linotp.pm
\n func_authenticate = authenticate
\n func_authorize = authorize
\n}<\/p><\/blockquote>\n
Unfortunately, in Debian 9, the radius_linotp.pm library is not available from the repositories, so we will take it from GitHub.<\/p>\n
# apt install git<\/code><\/pre>\n
# git clone https:\/\/github.com\/LinOTP\/linotp-auth-freeradius-perl<\/code><\/pre>\n
# cd linotp-auth-freeradius-perl\/<\/code><\/pre>\n
# cp radius_linotp.pm \/usr\/share\/linotp\/radius_linotp.pm<\/code><\/pre>\n
Now let's edit \/etc\/freeradius\/3.0\/clients.conf <\/p>\n
client servers {
\n ipaddr = 192.168.188.0\/24
\n secret = your_password
\n}<\/p><\/blockquote>\n
Now let's edit nano \/etc\/linotp2\/rlm_perl.ini<\/p>\n
Insert the same code as when installing on Debian 8 (described above)<\/p>\n
In theory, that should be all. (not tested yet)<\/p>\n
I will leave a few links below for setting up systems that often require two-factor authentication: 
\nSetting up two-factor authentication in Apache2<\/a><\/noindex><\/p>\n
Configuration with Cisco ASA<\/a><\/noindex>(another token generation server is used there, but the ASA settings are the same).<\/p>\n
VPN with two-factor authentication<\/a><\/noindex><\/p>\n
Settings two-factor authentication in ssh<\/a><\/noindex> (LinOTP is also used there) \u2014 thanks to the author. You can also find interesting things about LiOTP policy settings.<\/p>\n
Many website CMS also support two-factor authentication (LinOTP even has a special module for WordPress on github<\/a><\/noindex>), for example, if you want to create a secure section for company employees on your corporate site.
\nIMPORTANT FACT! Do not check the 'Google authenticator' option for using Google Authenticator! The QR code will not be readable then\u2026 (strange fact)<\/p>\n
The article was based on information from the following articles:
\nitnan.ru\/post.php?c=1&p=270571<\/a><\/noindex>
\nwww.digitalbears.net\/?p=469<\/a><\/noindex> <\/p>\n
Thank you to the authors.
\n
Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0441\u0430\u0439\u0442\u043e\u0432, \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432,ssh. \u041d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u043a\u0430: LinOTP + FreeRadius. \u0417\u0430\u0447\u0435\u043c \u043e\u043d \u043d\u0430\u043c? \u042d\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0435, \u0443\u0434\u043e\u0431\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438, \u043d\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0435\u0435 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0414\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u0443\u0434\u043e\u0431\u0435\u043d, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0433\u043b\u044f\u0434\u0435\u043d, \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0438 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a \u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27627,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47LinOTP two-factor authentication server | ProHoster","description":"Today I want to share how to set up the server.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0440\u0432\u0435\u0440 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 LinOTP | ProHoster","og:description":"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36873","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:08:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-01-22 05:08:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/36873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=36873"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/36873\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/27627"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=36873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=36873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=36873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}