I'm using Debian bullseye. I'm trying to set up SSH two types logins:
- password + code from Google's Authenticator (if user set it, "nullok" option),
- public key + code from Google's Authenticator (if user set it, "nullok" option).
Type #1 works for me. In type #2 I have public key + password (not public key passphrase) + code from GA. I added this line to /etc/ssh/sshd_config
AuthenticationMethods publickey,keyboard-interactive keyboard-interactive
I'd like to user won't be prompted for password if key was supplied. Precisely, how to bypass pam_unix.so demand if public key was provided?
Is there any way to accomplish what I want on one machine? Thanks in advance.