系统篇： ubuntu 搭建 MFA+SSH 多重身份认证

一、安装Google Authenticator PAM 模块

• 更新本机软件源和软件包

sudo apt-get update
sudo apt-get -y upgrade(一般可以不用更新)
1
2

• 安装libpam-google-authenticator

sudo apt install libpam-google-authenticator
1

• google-authenticator使用

droid@droid:~$ google-authenticator -h
google-authenticator [<options>]
 -h, --help                     Print this message
 -c, --counter-based            Set up counter-based (HOTP) verification
 -t, --time-based               Set up time-based (TOTP) verification
 -d, --disallow-reuse           Disallow reuse of previously used TOTP tokens
 -D, --allow-reuse              Allow reuse of previously used TOTP tokens
 -f, --force                    Write file without first confirming with user
 -l, --label=<label>            Override the default label in "otpauth://" URL
 -i, --issuer=<issuer>          Override the default issuer in "otpauth://" URL
 -q, --quiet                    Quiet mode
 -Q, --qr-mode={
   
1
2
3
4
5
6
7
8
9
10
11
12