On: The Google Authenticator Open Source project

[harper]

I have used the libpam support for a couple boxes. A neat way to use two factor auth on the cheap. http://code.google.com/p/google-authenticator/source/browse/...

[gst → harper]

I use it too.

The nice thing is that in the default config you don't need two-factor auth when using public-key auth.

So from your trusted terminal you use public-key auth, and only from untrusted terminals you need to use two-factor auth.

[cpswan → harper]

There's a pretty good howto for that at http://www.mnxsolutions.com/security/two-factor-ssh-with-goo...