On Thu, 18 Dec 2014, Robert Pendell wrote: > Based on what I've seen the reason is because SSH is handling pub-key > auth and bypasses PAM for it. Google Authenticator however is done > via PAM so it only works for keyboard interactive logins. No, this isn't correct. Pubkey authentication doesn't bypass PAM in any way that would affect other authentication methods. _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev