Home / server / Questions / 799657
Accepted
PhysiOS
Asked: 2016-08-29 17:53:00 +0800 CST

SSH Google Authenticator Ignore/Whitelist ips

  • 772

I installed google authenticator (two step verification), "libpam-google-authenticator" package, although it asks for a code for every single connection to SSH. I want to put localhost and my own ip whitelisted from google authenticator so I and localhost skip two step verification

Or is there a way to skip SSH challenge for certain ips?

google-authenticator

1 Answers

  1. Best Answer

    In "/etc/pam.d/sshd" 

    auth [success=1 default=ignore] pam_access.so accessfile=/etc/security/access-local.conf
auth required pam_google_authenticator.so

    Then on "/etc/security/access-local.conf"

    #localhost doesn't need two step verification
+ : ALL : 192.168.1.0/24
+ : ALL : LOCAL
+ : ALL : YOURIPHERE
#All other hosts need two step verification
- : ALL : ALL

    Don't forget to restart ssh

    • 6