2 Mar
2018
2 Mar
'18
5:53 p.m.
On Fri, 2 Mar 2018 15:58:36 +0000
Andy Smith <andy(a)bitfolk.com> wrote:
I wonder what the feeling is if it's only mandatory for
password-based access, if the choice is between that and
key-only.
Cheers,
Alun.
Something I find useful:
libpam-google-authenticator. I seem to
remember you're already using Google Authenticator for other
things, Andy, so it probably wouldn't take much extra work to set
up.
This is already available. If you enable two factor auth then it
asks for the Google authenticator code on SSH. Most people don't
configure two factor auth, and many do not want to see it made
mandatory.