markdown 为SSH设置Google身份验证器

Posted 2021-05-06

# README

## Install the PAM module

```
sudo apt install libpam-google-authenticator
```

Enable google-authenticator for your sessions:

```
google-authenticator
```

Save securely your backup password.

## Enable two-factor authentication in SSH


Edit `/etc/pam.d/sshd` by adding the following line above `@include common-auth`

```
auth sufficient pam_google_authenticator.so
```

Edit `/etc/ssh/sshd_config` by modifying the following options:


```
PubkeyAuthentication yes
PasswordAuthentication yes
ChallengeResponseAuthentication yes
AuthenticationMethods publickey,keyboard-interactive password,keyboard-interactive
UsePAM yes
```