SSH to use two-factor authentication using Google Authenticator on Debian or Ubuntu Server Rumi, November 19, 2023 A computer running Ubuntu 16.04 LTS or above A phone running Android or iOS A configured SSH connection You should understand the danger of stolen passwords. You don’t need to know what two-factor authentication is and how it works. 🙂 Installing and configuring required packages Start a terminal session and type: sudo apt install libpam-google-authenticator Configuring SSH To make SSH use the Google Authenticator PAM module, add the following line to the /etc/pam.d/sshd file: auth required pam_google_authenticator.so Now you need to restart the sshd daemon using: sudo systemctl restart sshd.service Modify /etc/ssh/sshd_config – change ChallengeResponseAuthentication from no to yes, so this part of the file looks like this: # Change to yes to enable challenge-response passwords (beware issues with # some PAM modules and threads) ChallengeResponseAuthentication no # CHANGE THIS TO YES # Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes Configuring authentication Google Authenticator makes the configuration of two-factor authentication much easier, comparing to (for example) libpam-oath. In a terminal, run the google-authenticator command. It will ask you a series of questions, here is a recommended configuration: Make tokens “time-base””: yes Update the .google_authenticator file: yes Disallow multiple uses: yes Increase the original generation time limit: no Enable rate-limiting: yes You may have noticed the giant QR code that appeared during the process, underneath are your emergency scratch codes to be used if you don’t have access to your phone: write them down on paper and keep them in a safe place. That’s all. Now, let’s open Google Authenticator and add our secret key to make it work. Don’t use unencrypted services to store secret keys, such as a notes synchronization service and so on. If you don’t want to type the key manually, use the QR code. Adding the secret to Google Authenticator We will use the latest version of Authenticator from the Play Store. The process shouldn’t look very different on iOS. Using the QR code Touch the Add icon (+) and select “Scan a barcode”. Use phone camera to scan QR code. Using the through key Touch the Add icon (+) and select “Enter a provided key”. Enter a name that you will recognise as being your 2FA method for SSH, then type the secret key provided by google-authenticator command. Ref: https://ubuntu.com/tutorials/configure-ssh-2fa#4-adding-the-secret-to-google-authenticator Related Administrations Configurations (Linux) 2 Factor Authentication2FAGoogle AuthenticatorSSH
Apache GuaCamole on Ubuntu 18 November 10, 2023November 17, 2023 Install the following repository and packages- sudo add-apt-repository ppa:remmina-ppa-team/remmina-next sudo apt-get update sudo apt-get install freerdp2-dev freerdp2-x11 Download file directly from here: wget https://git.io/fxZq5 -O guac-install.sh Make it executable: Related Read More
Fix: Unable to start TLS: SSL connect attempt failed error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed when connecting to ldap master.Cannot determine services – exiting September 1, 2018 My ZImbra 8.6 was throwing the following error once after my letsencrypt SSL got expired: Unable to start TLS: SSL connect attempt failed error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed when connecting to ldap master.Cannot determine services – exiting The Fix: In order to fix the problem you need to modify the following… Read More
Install Cacti 1.2 on Debian 11 June 17, 2022 First, update the repository index. sudo apt update Install MariaDB Database Install MariaDB from Official MariaDB Mirror Update the repository index and install the required packages. sudo apt update sudo apt install -y software-properties-common dirmngr apt-transport-https wget curl Add signing key to your system. curl -fsSL https://mariadb.org/mariadb_release_signing_key.asc | sudo gpg… Read More