TechSomething

GOOGLE-AUTHENTICATOR ON SSH ON DEBIAN 6 (ON RASPBERRYPI)

implementation of google-authenticator on Debian 6:

install the following packages:

sudo apt-get install libpam0g-dev

sudo apt-get install libreadline5-dev

and install the google-authenticator package:

wget https://google-authenticator.googlecode.com/files/libpam-google-authenticator-1.0-source.tar.bz2

tar -xjvf libpam-google-authenticator-1.0-source.tar.bz2

cd libpam-google-authenticator-1.0

make

sudo make install

then add “auth required pam_google_authenticator.so” at the begging of the file “/etc/pam.d/sshd”
sudo nano /etc/pam.d/sshd

and change the value “ChallengeResponseAuthentication” to “yes” in the file “/etc/ssh/sshd_config”
ChallengeResponseAuthentication yes

then run google-authenticator

and restart ssh: sudo service ssh restart

at your next login you’ll be asked for your Verification code:

sources:
for the procedure: http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html
for the packages to install: https://kb.askmonty.org/en/installing-correct-libraries-for-pam-and-readline/