Estou tentando fazer autenticação nginx 2FA usando pam.
/etc/pam.d/nginx_google_restricted:
auth required pam_google_authenticator.so forward_pass
auth required pam_unix.so use_first_pass
Eu tenho o SSH 2FA ativado. O pamtester autentica com êxito o formato password + code, mas o login do navegador falha.
Log:
Oct 10 18:40:34 dummy nginx_google_restricted(pam_google_authenticator)[2245]: Failed to change user id to "ryan"
Oct 10 18:40:34 dummy ker process[2245]: pam_unix(nginx_google_restricted:auth): auth could not identify password for [ryan]