Comments on: How to Setup Two-Factor Authentication For SSH In Linux

By: Ravi Saive

Ravi Saive — Wed, 16 Jul 2025 04:48:33 +0000

In reply to AmongUs.

@Among,

Hi, thank you for your feedback!

I’ve just updated the article with the correct and verified steps for RHEL-based systems, including RHEL 8/9, Rocky Linux, and AlmaLinux.

Please check it out again and let me know if you face any issues.

Appreciate your support!

— AdminHi, thank you for your feedback!

You’re absolutely right — some parts needed updating for RHEL 8/9. I’ve just updated the article with the correct and verified steps for RHEL-based systems, including RHEL 8/9, Rocky Linux, and AlmaLinux.

Please check it out again and let me know if you face any issues.

Appreciate your support!

By: AmongUs

AmongUs — Tue, 15 Jul 2025 10:46:27 +0000

2FA does not works for RHEL8/9 ,Dear Admin could you please update the article which work with rhel 8/9.

Thanks!

By: Bendt Mollerup

Bendt Mollerup — Fri, 09 Dec 2022 12:31:36 +0000

I can get qr-code from google-authenticator by install following:

# dnf install qrencode qrencode-libs -y

This makes it easy to use the app on a smartphone.

The code is then easy confirmed – anyway I do not get the two factor authenticationat login yet…

By: Ger

Ger — Tue, 27 Sep 2022 12:33:45 +0000

When a normal user runs google_authenticator the secret file .google_authenticator is owned by the root.

-r--------. 1 root nogroup 117 Sep 27 12:29 .google_authenticator

In /var/log/secure I see :

Sep 27 12:21:30 localhost sshd(pam_google_authenticator)[8475]: Secret file “/user/undergrads/John/.ssh/google_authenticator” must be owned by “John”

I have: Rocky Linux 8.6 google-authenticator-1.07-1.el8.x86_64

By: tazmo8448

tazmo8448 — Sat, 13 Apr 2019 20:47:05 +0000

I've tried the command lines for Google Authenticator recently (Linux Mint 19.1) and found they do not work. upon entering I receive 'command not found' which stands to reason when the OP was in 2013. I can create a pam file but it does not 'trigger' a response on boot.... i.e. no requirement for a password other than the one I created on install.