From 253046ca5f04aa3d288b2f2ed8006a8f98d13256 Mon Sep 17 00:00:00 2001 From: Boshi Lian Date: Sun, 3 Oct 2021 19:39:49 -0700 Subject: [PATCH] Update README.md --- README.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 349b6838..e72fc350 100644 --- a/README.md +++ b/README.md @@ -210,7 +210,7 @@ if a client failed in this challenge, connection will be closed. however, the client has to pass the upstream server's auth in order to establish the whole connection. `Additional Challenge` is required, but not enough. -This is useful when you want use publickey and something like [google-authenticator](https://github.com/google/google-authenticator) together. OpenSSH do not support use publickey and other auth together. +This is useful when you want use publickey and something like [google-authenticator](https://github.com/google/google-authenticator) together. #### Available Challengers @@ -228,7 +228,14 @@ This is useful when you want use publickey and something like [google-authentica Support token and onetouch from - +#### OpenSSH Native way to do 2FA (No SSHPiper) + +in `sshd_config` +``` +AuthenticationMethods publickey,keyboard-interactive:pam +``` + +Enable 2FA PAM, for example, `pam_yubico` or `pam_google_authenticator`. ### Auditor for pipes (`--auditor-driver=`)