I am trying to set up 2FA as per docs.tritondatacenter.com/public-cl…ng-started/2fa/google-authenticator in the lgobal zone. And I have both PasswordAuthentication yes and AuthenticationMethods publickey,keyboard-interactive , but it still requires only publickey to ssh login, ( : Permission denied (publickey). ) and I was thinking I could still use password+2FA with Google authenticator (Aegis)

Hm or I shoudl choose one OR another, not both..

And now when I have /root/.google_authenticator file and I enter verification code, it logs me in withotut asking for password

And that github scrip seems that it is not working, after changing path to /tools/ for global zone. first two checks works , second two dees not : "/etc/ssh/sshd_config": 1: bad flag in substitute command: 'h'

Nobory use it on global zone?

Er, -i is supposed to take a filename extension for renaming the old version of the file

I.e. the line should be something like --- sed -i.bak 's/^\(PermitRootLogin \).*/\1Yes/' /etc/ssh/sshd_config