# OTP

## Activer l'otp

```
google-authenticator -s ~/.ssh/google_authenticator
```

## Config

`/etc/pam.d/sshd` 
```
auth       required     pam_google_authenticator.so secret=/home/${USER}/.ssh/google_authenticator nullok
```

`/etc/ssh/sshd_config.d/10-custom.conf`
```
PasswordAuthentication no
ChallengeResponseAuthentication yes
UsePAM yes
```