Hello, I would like to raise an enhacement request to OpenSSH. I need users to authenticate with two factors, both of them being different SSH keys. In current OpenSSH 6.2+ configuration this is done be setting AuthenticationMethods property to „publickey,publickey“ in sshd_config file. But the problem is that SSH Daemon does not check that different key was used as first and second factor. In other words, same key can be used twice. Thank You.
Created attachment 2516 [details] Require multiple publickey entries in AuthenticationMethods use different keys Thanks for reminding me to do this - I've been planning it for a while. Here's a patch that implements it for -current.
Patch applied. This will be in openssh-6.8 - thanks!
openssh-6.8 is released