Skip to content

Instantly share code, notes, and snippets.

@int0x80

int0x80/ssh-2fa-fix.md

Last active April 14, 2017 20:15
Show Gist options
  • Save int0x80/9fc36645fed87f54d6ad6b025667199a to your computer and use it in GitHub Desktop.
Save int0x80/9fc36645fed87f54d6ad6b025667199a to your computer and use it in GitHub Desktop.
Download ZIP
Fixing OpenSSH + Google Authenticator on Debian
Raw
ssh-2fa-fix.md

Recently I was unable to SSH into a host where 2FA was setup via Google Authenticator. The error message looked something like this:

$ ssh someuser@some.host.foo
someuser@some.host.foo's password:
Permission denied, please try again.

No entries were made in auth.log, and nothing had changed on the system aside from doing a dist-upgrade. Thanks to DigitalOcean, I determined one update was needed in /etc/ssh/sshd_config.

## Updated to 'yes' for 2FA - int0x80
# ChallengeResponseAuthentication no
ChallengeResponseAuthentication yes

¯\(ツ)/¯

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment