chaining AUTH methods -- adding GoogleAuthenticator 2nd Factor to pubkey auth? can't get the GA prompt :-/

Damien Miller djm at mindrot.org
Thu Dec 18 18:01:59 EST 2014


On Wed, 17 Dec 2014, Dmt Ops wrote:

>         vi /etc/ssh/sshd_config
>                 ...
>         -        ChallengeResponseAuthentication      no
>         +        ChallengeResponseAuthentication      yes
>         +        KbdInteractiveAuthentication         yes
>                 ...
> 
> and restart the daemon

You've missed the crucial part to require multiple authentication
methods succeed before the user is considered authenticated:

AuthenticationMethods publickey,keyboard-interactive

-d


More information about the openssh-unix-dev mailing list