SSH 2FA authentification

Asked Nov 14 '21 at 05:34

Active Nov 14 '21 at 05:34

Viewed 45 times

I'm trying to enable 2fA authentification on my lighsail server, running ubuntu 20.04. I installed google-authenticator and launched it, configured /etc/pam.d/sshd to add the following line :

auth required pam_google_authenticator.so
auth required pam_permit.so

and then /etc/ssh/sshd_config to set :

ChallengeResponseAuthentication yes

But then nothing happens. If I add the line :

AuthenticationMethods publickey,keyboard-interactive

Then the ssh client asks for a password that I don't have (I have a keypair, but no password). What can I do to enable 2FA ?

asked Nov 14 '21 at 05:34

Nathos8

Did you restart sshd after making changes? – Yuri Ginsburg Nov 14 '21 at 05:48
Yes............ – Nathos8 Nov 15 '21 at 23:53
Put `AuthenticationMethods publickey,keyboard-interactive:pam` to `sshd_config` – Yuri Ginsburg Nov 16 '21 at 00:12

SSH 2FA authentification

0 Answers0