![]() I prefer to just call the right ones on the commandline directly: google-authenticator -counter-based -qr-mode=NONE -rate-limit=1 -rate-time=30 -emergency-codes=1 -window-size=3 ![]() This will prompt you for a bunch of questions. To create a new key, run this command on the server: google-authenticator -c Then reload ssh (not sure that's actually necessary): service ssh reload To renew the token all the time and have more information about I also used no_increment_hotp debug while debugging to avoid having Only use it for SSH, I added this line on top of /etc/pam.d/sshd: auth required pam_google_authenticator.so nullok Then you need to add the module in your PAM stack somewhere. Source package: apt install libpam-google-authenticator On Debian, the PAM module is shipped in the google-authenticator Converting to a Yubikey-compatible secret.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |