chaining AUTH methods -- adding GoogleAuthenticator 2nd Factor to pubkey auth? can't get the GA prompt :-/

Damien Miller djm at
Thu Dec 18 18:00:16 EST 2014

On Thu, 18 Dec 2014, Robert Pendell wrote:

> Based on what I've seen the reason is because SSH is handling pub-key
> auth and bypasses PAM for it.  Google Authenticator however is done
> via PAM so it only works for keyboard interactive logins.

No, this isn't correct. Pubkey authentication doesn't bypass PAM
in any way that would affect other authentication methods.

More information about the openssh-unix-dev mailing list