Harrison Powers fijimunkii

Google Authenticator for SSH How-To

Installing the Google Authenticator pam package alone does not configure a system for 2 Factor Authentication when connecting via SSH.

Overview

The Google Authenticator package can be installed on Ubuntu via apt-get on Ubuntu 14.04.3 and later (that I've confirmed).

It provides a pam module that allows you to prompt a user for a code generated via a Google Authenticator app or other compatible TOTP app (such as 1Password). The script below enables the authenticator prompt when using ssh and password authentication.

A few things to keep in mind:

You cannot enable Google Authenticator for Public Key-based authentication at the same time as Password-based authentication

	# ensure the instance has a role with CloudWatchAgentServerPolicy

	# cloudwatch logs (awslogs)
	curl https://s3.amazonaws.com/aws-cloudwatch/downloads/latest/awslogs-agent-setup.py -O
	sudo python ./awslogs-agent-setup.py --region us-east-1

	# cloudwatch metrics
	wget https://s3.amazonaws.com/amazoncloudwatch-agent/linux/amd64/latest/AmazonCloudWatchAgent.zip
	unzip AmazonCloudWatchAgent.zip
	sudo ./install.sh

	#!/usr/bin/env bash

	set -e
	set -u
	set -o pipefail

	DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"

	if [ -d "$HOME/.pki/nssdb" ]; then
	echo "cert db already initialized"

	update kernel https://github.com/fijimunkii/linux-kernel-utilities
	`sudo reboot`
	update packages
	disable root ssh login
	compile outdated packages

	#!/bin/bash
	#attach the EBS to /dev/sdf before running it

	#format EBS
	mkfs -t ext4 /dev/xvdf

	#copy original /var to /dev/xvdf
	mkdir /mnt/new
	mount /dev/xvdf /mnt/new
	cd /var

	#!/bin/bash
	#
	# Sample for getting temp session token from AWS STS
	#
	# aws --profile youriamuser sts get-session-token --duration 3600 \
	# --serial-number arn:aws:iam::012345678901:mfa/user --token-code 012345
	#
	# Based on : https://github.com/EvidentSecurity/MFAonCLI/blob/master/aws-temp-token.sh
	#

	docker system df
	docker system prune -a