Question

Is it possible to combine Password and Google Auth code?

Posted December 10, 2020 255 views
Security

Hi,

I tried to set up a combination of password and Google’s PAM but it didn’t work.

Without adding:
‘AuthenticationMethods publickey,password publickey,keyboard-interactive’
to /etc/ssh/sshd_config
I was allowed to login with just the Google Auth code, but wasn’t asked for the password.

With that line added I got 'Permission denied’.

So I guess it’s the 'AuthenticationMethods’ line that is failing (since it specifically includes publickey, which I don’t use). I tried to edit it in various wayd but without success. How should it be written in order to ask for pw and Google Auth code?

Best wishes!
David

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
Submit an Answer
1 answer

Hello,

I will recommend you to use an ssh-key and the Google Auth code as it will be a lot more secure instead of using the password for the droplet.

However, if you want to use a password with Google Auth you should be able to set up this via the /etc/ssh/sshd_config file :

  • AuthenticationMethods publickey,password publickey,keyboard-interactive

This is listed as Step 3 in the tutorial.

Hope that this helps!
Regards,
Alex