Ubuntu安装Google Authenticator

Ubuntu安装Google Authenticator

1. 更新apt

sudo apt update

2.下载并安装google-authenticator

sudo apt install libpam-google-authenticator

3.安装完成之后修改文件

sudo vim /etc/pam.d/sshd

4.在此文件/etc/pam.d/sshd末尾添加

#One-time password authentication via Google Authenticator
auth required pam_google_authenticator.so

5.接下来修改ssh配置文件，修改为yes。

sudo vim /etc/ssh/sshd_config

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
UsePAM yes
KbdInteractiveAuthentication yes

6.接下来我们就可以通过生成一个二维码和密匙，全部选择yes，

google-authenticator

7.重启sshd服务

sudo systemctl restart ssh

8.重新连接ssh进行测试。

ssh ywj@172.16.122.129