chaining AUTH methods -- adding GoogleAuthenticator 2nd Factor to pubkey auth? can't get the GA prompt :-/

[Robert Pendell]

On Thu, Dec 18, 2014 at 2:01 AM, Damien Miller <...> wrote:
> On Wed, 17 Dec 2014, Dmt Ops wrote:
>
>>         vi /etc/ssh/sshd_config
>>                 ...
>>         -        ChallengeResponseAuthentication      no
>>         +        ChallengeResponseAuthentication      yes
>>         +        KbdInteractiveAuthentication         yes
>>                 ...
>>
>> and restart the daemon
>
> You've missed the crucial part to require multiple authentication
> methods succeed before the user is considered authenticated:
>
> AuthenticationMethods publickey,keyboard-interactive
>

Ahh... I wasn't even aware of that option.

Robert Pendell
shinji at elite-systems.org
A perfect world is one of chaos.