OTP

Activer l'otp

google-authenticator -s ~/.ssh/google_authenticator

Config

/etc/pam.d/sshd

auth       required     pam_google_authenticator.so secret=/home/${USER}/.ssh/google_authenticator nullok

/etc/ssh/sshd_config.d/10-custom.conf

PasswordAuthentication no
ChallengeResponseAuthentication yes
UsePAM yes