Bisounours

Bisounours

Just a tech guy who likes carebears

Setting Google Authenticator 2FA for SSH on Debian 11

less than 1 minute read

Following my fresh server install, one of my first things to do was setting up SSH access, with Google Authenticator.

It used to work pretty much out of the box, you just modify /etc/pam.d/ssh, make sure you have

ChallengeAuthentication Yes

in your sshd_config and voilà.\

Well, apparently this no longer works out of the box, potentially due to the default value of the AuthenticationMethods value.
In all cases, setting it to

AuthenticationMethods publickey keyboard-interactive

works.

You May Also Enjoy

A “classic” problem

5 minute read

My initial problem was fairly simple: I like to listen to the “Radio Classique” radio (it’s a French radio), and with my Google Nest Hub set to accept comman...

Too much Sketchup

3 minute read

I like mapping out my home. I like it a lot, and for the past 5 places I’ve lived, I’ve spend a lot of time arranging furniture with a 3D software. Maybe a l...

The DNS privacy issue

5 minute read

Travelling nowadays I’m generally a lot less worried about (online) privacy and security than I was 10 or years ago, because everything is HTTPS. No snooping...