Comments on: Secure SSH using two-factor authentication on Ubuntu 16.04

By: admin

admin — Tue, 09 May 2017 06:19:22 +0000

In reply to meepmeep.

Edit the /etc/ssh/sshd_config SSH configuration and add:

UsePAM yes
AuthenticationMethods publickey,password publickey,keyboard-interactive

Edit the /etc/pam.d/sshd PAM configuration file and comment out the @include common-auth line:

# Standard Un*x authentication.
#@include common-auth

Then add/modify the following lines:

# Standard Un*x password updating.
@include common-password
auth required pam_google_authenticator.so nullok

Restart SSH for the changes to take effect.

Run google-authenticator as any users that need 2FA, and don’t run it for users where only SSH keys will be used.

meepmeep — Mon, 08 May 2017 20:05:46 +0000

Is it possible to enable 2FA only for specific user / group on the server ?

Benjamin — Tue, 25 Apr 2017 09:41:18 +0000

Please continue this great work and I look forward to more of your awesome blog posts.

admin — Sat, 22 Apr 2017 05:48:22 +0000

In reply to Hector. You can implement two-factor authentication on any server.

Hector — Fri, 21 Apr 2017 15:24:47 +0000

Can this be implemented for any server or does it have to be a VPS? Thanks.