2FA over ssh

Tested it and works well with the non standard ssh server (dropbear) so openssh server i used. i guess great to make use of!!


https://www.comparitech.com/blog/information-security/linux-2fa-ssh-login/

Only i can not get xwin software run from terminal.

Interesting…thanks

Yep indeed it’s working fine with openssh. I guess on dropbear some other files would need to be adjusted to enable google authenticator

contacted the developers of dropbear, this is what they say about 2FA:


Sorry, there isn’t any way to do 2fa, unless you have some PAM module that expects “password-2FApart” combined into one password response.

Cheers,

Thx for checking. Looks it will not be possible with dropbear, unless they will will support the required PAM modules.

One thing in addition guys. I checked 2FA together with OpenSSH SFTP. Used WinSCP as Client and YES it was working as well. So a pretty cool thing :sunglasses:

Sorry Joulinar for diggin up this really old thread.
But from my tests on a VM this only works locally and not remotely via Bitvise.

Is there a way to enable 2FA over remote SSH?
Many thanks,
Daz

use a VPN to connect from remote to local side

Thanks Joulinar, I tried several attempts and permutations.
But I couldn’t get it to accept the 2FA code, though the prompts worked fine.

I haven’t given up though. I just haven’t found a way to make it work yet.

is this remote 2FA working on other Debian based OS?

Sorry Joulinar, I didn’t get a notification.
I only run DietPi :laughing: so I haven’t tried it.