I prefer to just call the right ones on the commandline directly: google-authenticator -counter-based -qr-mode=NONE -rate-limit=1 -rate-time=30 -emergency-codes=1 -window-size=3 This will prompt you for a bunch of questions. To create a new key, run this command on the server: google-authenticator -c Then reload ssh (not sure that's actually necessary): service ssh reload To renew the token all the time and have more information about I also used no_increment_hotp debug while debugging to avoid having Only use it for SSH, I added this line on top of /etc/pam.d/sshd: auth required pam_google_authenticator.so nullok Then you need to add the module in your PAM stack somewhere.
Source package: apt install libpam-google-authenticator On Debian, the PAM module is shipped in the google-authenticator Converting to a Yubikey-compatible secret.
0 kommentar(er)
