Support for ChallengeResponseAuthentication in Match section

Iain Morgan imorgan at nas.nasa.gov
Tue Dec 15 06:44:16 AEDT 2015


On Fri, Dec 11, 2015 at 11:13:59 +0300, Alexander Afonyashin wrote:
> Hi,
> 
> I'm using 2-factor authentication (pubkey+googe_authenticator) and
> have an issue with rsync. It's configured to use pubkey to
> authenticate to server so when google_authentication is bypassed by
> not creating .google_authenticator file for particular user (thanks to
> nullok option in PAM) it still sends to stderr "Authenticated with
> partial success." message although it succeeded.
> 
> So idea is simple: disable 2-factor authentication for particular user/network.
> 

Try KbdInteractiveAuthentication (which is supported in Match blocks)
instead of ChallengeResponseAuthentication.

-- 
Iain Morgan


More information about the openssh-unix-dev mailing list