You should now be able to log into the server with the combination of two-factor authentication and SSH key authentication. Once you’ve made those modifications, save and close the file. If you see those lines configured in any different way, edit them to reflect the above. If you don’t see any of the above lines, make sure to add them.
If you see any of the above lines commented out, remove the # to uncomment them. In that file, you’ll need to configure the following lines:ĪuthenticationMethods publickey,keyboard-interactive At the top of that file (Under #%PAM-1.0) add the following:Īuth sufficient pam_google_authenticator.so You have commented out (added a # at the beginning of the line):Īuth required pam_google_authenticator.so The first thing to do is open /etc/pam.d/sshd. After you are able to log into your server, using key authentication, we’ll re-configure two-factor authentication to allow it to function with key authentication. Once you have two-factor authentication disabled, set up SSH key authentication. Once that is working, comment out the new lines in both /etc/ssh/sshd_config and /etc/pam.d/sshd and restart sshd. Next, you need to make sure you have both two-factor authentication and SSH key authentication working. The last thing you want is to be working on this remotely, only to find you’ve locked yourself out of your machine. You should first have physical access to the Linux server you are going to configure. It’s no more challenging than setting up both systems, you just have to make a few configuration changes. When using two-factor authentication in conjunction with SSH key authentication, you must take extra measures to ensure it will function as expected. You cannot simply configure two-factor authentication as per usual. It’s actually quite an easy task to undertake. I’ve covered both setting up two-factor authentication on CentOS 7 and Linux, and SSH key authentication on Linux. But what if you want to take that one massive step forward by enabling SSH key authentication? The one-two punch of two-factor authentication and key authentication really makes your Linux server a challenging fortress to penetrate. If you do, you should probably have already configured two-factor authentication to help lock down that login.
#KEYBASE 2FA HOW TO#
Jack Wallen shows you how to set up both two-factor authentication and SSH key authentication for a rock-solid remote login of your Linux servers.Ĭhances are you administer your Linux machines by way of logging in via SSH. How to combine SSH key authentication and two-factor authentication on Linux
0 kommentar(er)
