chaining AUTH methods -- adding GoogleAuthenticator 2nd Factor to pubkey auth? can't get the GA prompt :-/

Damien Miller djm at mindrot.org
Wed Dec 24 07:48:17 EST 2014



On Tue, 23 Dec 2014, Dmt Ops wrote:

> testing goole-authenticator's standalone functionality, it
> 
>     > cd google-authenticator/libpam/
>     > ./demo
>         Verification code:  123456
>         Login failed
>         Invalid verification code
>     >
> 
> fails with an INVALID code, and
> 
>     > ./demo
>         Verification code:  XXXXXX
>     >
> 
> succeeds with a VALID code.
> 
> turning up the sshd server debug level to DEBUG3, entering a similarly
> VALID GA verification code, the code is declared "invalid",

This section of debug log is incomplete. Please try to get kbd-int auth
working alone. I've used google authenticator via PAM before, so I know
this works...

-d


More information about the openssh-unix-dev mailing list