ctrl+alt+printScreen 截图 q+tab 补齐
一、
搜索Google Authenticator ssh
date -s "2015-6-25 17:24"
yum -y install wget gcc make pam-devel libpng-devel
mkdir wpc
cd wpc/
ll
wget http://fukuchi.org/works/qrencode/qrencode-3.3.1.tar.gz
mkdir soft
cd soft/
(mv https://blog.csdn.net/u012110719/article/details/qrencode-3.3.1.tar.gz https://blog.csdn.net/u012110719/article/details/46696035/)
ll
tar zxf qrencode-3.3.1.tar.gz
cd qrencode-3.3.1
https://blog.csdn.net/u012110719/article/details/46696035/configure --prefix=/usr
make
make install
二、
搜索http://61.139.99.37/mysoft/Google_authenticator/ 右键libpam-google-authentictor-1.0-source.tar.bz2属性
wget+属性中的地址
tar vxjf libpam-google-authenticator-1.0-source.tar.bz2
cd libpam-google-authenticator-1.0
make
make install
google-authenticator
y
y
y
y
复制Your new secret key is: FQTMHFXXU7KAC5GC
Your verification code is 776754
Your emergency scratch codes are:
88914729
87595312
57769644
63200612
91012248
三、
vi /etc/pam.d/sshd
添加auth required pam_google_authenticator.so (i,ESC,:Wq!) 并保存
vi /etc/ssh/sshd_config
/ChallengeResponseAuthentication no 把它改成
ChallengeResponseAuthentication yes 并保存
service sshd restart
四、
vi /etc/sysconfig/selinux
复制SELINUX=enforcing (yy-p复制-粘贴)
将SELINUX=enforcing改为
SELINUX=disabled 并保存
getenforce 为Erroring不行，为Permissive正确
setenforce 0
getenforce 为Permissive正确
