chaining AUTH methods -- adding GoogleAuthenticator 2nd Factor to pubkey auth? can't get the GA prompt :-/
Damien Miller
djm at mindrot.org
Thu Dec 18 18:00:16 EST 2014
On Thu, 18 Dec 2014, Robert Pendell wrote:
> Based on what I've seen the reason is because SSH is handling pub-key
> auth and bypasses PAM for it. Google Authenticator however is done
> via PAM so it only works for keyboard interactive logins.
No, this isn't correct. Pubkey authentication doesn't bypass PAM
in any way that would affect other authentication methods.
More information about the openssh-unix-dev
mailing list