best ssh security

[wlraider70]

I've been using pubkeys for ssh security.

The other day i was setting up a new server and I used Google authentication, the one with the 6 digit changing code. I also still have the password enabled.

So whats best

pubkeys or authenticator or authenticator and password?

[MadsRC]

Oh my, I didn't know you could use the Authenticator with other services than GMail.
I use it for my Google Account and I'm extremely happy with it.

However, I'm a little skeptical about it though. I know the authenticator i Open Source, but since I haven't reviewed the code or read about anyone that have, I'd have to do a little more research before I decide upon that.

I guess it's up to how much you trust Google ;)

Keys are still my preferred way of doing secure logins. One key for every machine I use, with a strong password, plus a special key I keep on me, encrypted and with a extra strong passphrase for emergency access. If any keys are lost, simply remove the key from authorized_keys...

Only problem is though, that ssh-copy-id host@network is problematic if logins are keys only, since I haven't found a way to make the ssh-copy-id connection using an existing key...

[wlraider70]

This is the guide I used

http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/

All the crypto is done on your server.

[CharlesA]

This is the guide I used

http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/

All the crypto is done on your server.
Wow. Thanks for the link.

[donniezazen]

This is the guide I used

http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/

All the crypto is done on your server.

Thanks setting it up now.

[mazato]

guys, I used the link that wlraider70 posted, but i can get through the passwords. everything sets up fine though.

[wlraider70]

What version of Ubuntu are you using?
Are you saying you can't get the regular user password to work out the Google code won't work?