Multifactor authentication troubles

James Murphy james.murphy.debian at gmail.com
Sun Jul 24 09:49:17 AEST 2016


On 07/23/2016 05:53 PM, Darren Tucker wrote:
> 1) Use the per-auth-type PAM configs as per
> https://bugzilla.mindrot.org/show_bug.cgi?id=2246.
> 2) Configure the ssh-passwd stack to have just pam_unix.so and the
> ssh-kbdint stack to have just pam_signal.so.
> 3) Put "AuthenticationMethods password,keyboard-interactive
> publickey,keyboard-interactive" into sshd_config.

This seems to be exactly what I'm looking for. I see that a patch was
written on 2015-04-16 that implements this functionality, though there
has been no action taken or feedback given on the patch since then. Has
this slipped through the cracks, or were there more issues that needed
to be resolved before merging?


James Murphy


More information about the openssh-unix-dev mailing list