setup_2fa_with_google_authenticator_for_ssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
setup_2fa_with_google_authenticator_for_ssh [16.12.2022 09:43] – Pascal Sutersetup_2fa_with_google_authenticator_for_ssh [09.12.2025 16:47] (current) – [ssh key authentication] Pascal Suter
Line 6: Line 6:
 apt install libpam-google-authenticator apt install libpam-google-authenticator
 echo "auth required pam_google_authenticator.so" >> /etc/pam.d/sshd echo "auth required pam_google_authenticator.so" >> /etc/pam.d/sshd
-sed -i 's/ChallengeResponseAuthentication no/ChallengeResponseAuthentication yes/' /etc/ssh/sshd_config+echo "KbdInteractiveAuthentication yes" >> /etc/ssh/sshd_config.d/10-KbdInteractiveAuth.conf
 </code> </code>
 now run this for each user to create the google authenticator key for each user:  now run this for each user to create the google authenticator key for each user: 
Line 26: Line 26:
 make sure these options are sett as follows in your ''/etc/ssh/sshd_conf'' file:  make sure these options are sett as follows in your ''/etc/ssh/sshd_conf'' file: 
 <code> <code>
-ChallengeResponseAuthentication yes+KbdInteractiveAuthentication yes
 UsePAM yes UsePAM yes
 AuthenticationMethods publickey,password publickey,keyboard-interactive AuthenticationMethods publickey,password publickey,keyboard-interactive
  • setup_2fa_with_google_authenticator_for_ssh.1671180193.txt.gz
  • Last modified: 16.12.2022 09:43
  • by Pascal Suter