Two-Factor SSH login to CentOS 7

[bertalanimre]

Hey Forum,

I've a CentOS 7 server where I want to enable a two-factor SSH login while using ssh-keys. I've done the following so far according any of the tutorials on the web if you search for "centos 7 google-authenticator ssh"

- Installed google_authenticator
- generated qr code with google_authenticator command
- added auth required pam_google_authenticator.so to /etc/pam.d/sshd
- changed ChallengeResponseAuthentication from no to yes in /etc/ssh/sshd_config
- restarted sshd with systemctl restart sshd

Results: I can still login without any 2nd step in the verification. So it doesn't ask for my authentication code. Do you know what did I miss according to what I've said?

Bert

[bertalanimre]

Moving this question to appropriate forum: viewtopic.php?f=51&t=62647

[scottro]

I'll lock this one then, so that it doesn't get answered. It's always best to ask a mod to just move the post rather than make a double post.