Multi Factor Authentication with SSH

This is howto setup MFA using the Google Authenticator.

Installation

• Only one package is required to install:

apt install libpam-google-authenticator

Default Setup

• Configuration /etc/pam.d/sshd

Put the following sting underneath of @include common-auth

auth required pam_google_authenticator.so

• Configuration /etc/ssh/sshd_config

LogLevel DEBUG3
PasswordAuthentication no
ChallengeResponseAuthentication yes
UsePAM yes