imported from https://code.google.com/p/google-authenticator/
A list of hosts to your user configuration file, from which the validation code will never be asked (trusted hosts)
Add this option to the user configuration file to only enter a validation code only once in a time period from the same host (temporary trusted host)
cd libpam
make
make test
make install
edit these files :
-
/etc/ssh/sshd_config
ChallengeResponseAuthentication yes
-
/etc/pam.d/sshd (under @common-auth)
auth required pam_google_authenticator.so nullok noskewadj