It Started With a Hardware Limitation I have been using Quectel GNSS modules in my designs for a while. They are reliable, well-documented, and the support ecosystem is solid. But the module I had been using had one problem that I kept running into: no external antenna support . For most projects that is a minor inconvenience. For a marine vessel monitoring and control system , it is a non-starter. A vessel hull blocks sky view, antenna placement is critical, and the difference between a clean fix and no fix at all often comes down to whether you can mount the antenna where it actually has line of sight. An integrated antenna in a sealed enclosure below deck simply does not cut it. So I went directly to Quectel. The Conversation With Quectel I reached out through their official sample request channel. I was not expecting much — most component manufacturers have a standard process: fill out a form, wait, get a few uni...
This is a simple setup guide to enabling Two Factor Authentication (2FA) on Linux SSH login. I this article I wont go deep into setup and issues that I have faced when implementing this.
First thing is first
Update your system first. I have used Ubuntu 20.04 and it is always up to date.
To enable 2FA you need to install google authenticator modules
sudo apt install libpam-google-authenticatorConfiguration for PAM and SSHD
Add the the following line to /etc/pam.d/sshd and After adding this line please restart the sshd services.
auth required pam_google_authenticator.soGo to /etc/ssh/sshd_config and check if the following line exist. Default value will be "no" so change it to "yes" to activate.
ChallengeResponseAuthentication yes
Configuration for Authenticator
In the terminal run google authenticator command
It will ask few things to acknowledge by user. Details you can see from the below video. Once this part is done you are ready to use the 2FA in ubuntu.
Testing the 2FA
To test if your configuration is correctly setup, you can ssh the system and it will prompt to insert verification code after you enter the password. Details shown in the following video.
I hope this will help others to hardening there systems. Enjoy and if you need any help please message me.
Comments