I am currently trying to achieve the following on openSUSE:
Request User Password (LDAP)
Query 2FA-Token (Google-Auth)
(see picture of how I want it to be)
Under Debian it works, but under openSUSE it only works if the order is the other way round, i.e. first token, then password. If I change the order in /etc/pam.d/sshd so that the password is asked first, the Google-Authenticator is skipped. What is the reason for this, or what am I doing wrong? For better understanding I have posted my /etc/ssh/sshd_config and /etc/pam.d/sshd below. I am using openSUSE LEAP 15.2 and would appreciate helpful answers!
I am currently trying to achieve the following on openSUSE: Request User Password (LDAP) Query 2FA-Token (Google-Auth) (see picture of how I want it to be) Under Debian it works, but under openSUSE it only works if the order is the other way round, i.e. first token, then password. If I change the order in /etc/pam.d/sshd so that the password is asked first, the Google-Authenticator is skipped. What is the reason for this, or what am I doing wrong? For better understanding I have posted my /etc/ssh/sshd_config and /etc/pam.d/sshd below. I am using openSUSE LEAP 15.2 and would appreciate helpful answers!
sshd_config: (only changes)
sshd: