libpam does not "receive verification code from user" about google-authenticator HOT 8 CLOSED

Comment #1 originally posted by damokles on 2010-09-27T15:34:03.000Z:

Hey,

try changing

ChallengeResponseAuthentication no

to

ChallengeResponseAuthentication yes

in your /etc/ssh/sshd_config and restart your ssh daemon. Otherwise pam expects the verification code but ssh does not prompt for it.

Best.

from google-authenticator.

Comment #2 originally posted by w.romain on 2010-10-01T09:58:47.000Z:

Of course - "ChallengeResponseAuthentication yes" immediately fixes the issue.

Problem solved, thanks!

from google-authenticator.

Comment #3 originally posted by bkgoodman on 2010-10-21T17:16:08.000Z:

I am still getting this issue - even with: ChallengResponseAuthentication yes

Any idea what else to try? I build my OpenSSH with --with-pam - is there anything else I'm missing?

from google-authenticator.

Comment #4 originally posted by [email protected] on 2011-02-24T16:55:41.000Z:

Could you attach some output from "ssh -v" from a client to the server and perhaps output from "/usr/sbin/sshd -d" run from the server?

from google-authenticator.

Comment #5 originally posted by [email protected] on 2011-03-09T19:55:10.000Z:

Closing this bug report for now, as it looks to be a configuration problem with SSH.

Feel free to re-open, if you can provide additional data points that would help us in reassessing the problem.

from google-authenticator.

Comment #6 originally posted by [email protected] on 2011-03-09T20:14:15.000Z:

Issue 15 has been merged into this issue.

from google-authenticator.

Comment #7 originally posted by druneau on 2012-09-05T14:13:41.000Z:

I know the issue has been closed.. but I was running into a similar situation, from the logs I saw "localhost sshd(pam_google_authenticator)[17997]: Failed to read “/root/.google_authenticator”"

Then found this discussion:

https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=754978

Running the chcon line from 2nd post fixed my issue on CentOS 6.3 32bit.

from google-authenticator.

it is caused by selinux.

I want to know when it is corrected in epel for CentOS 6.

from google-authenticator.