17:00:43 <nikolam> I am trying to set up 2FA as per https://docs.tritondatacenter.com/public-cloud/getting-started/2fa/google-authenticator  in the lgobal zone. And I have both PasswordAuthentication yes and  AuthenticationMethods publickey,keyboard-interactive , but it still requires only publickey to ssh login, ( : Permission denied (publickey). ) and I was thinking I could still use password+2FA with Google authenticator (Aegis) 
17:02:16 <nikolam> Hm or I shoudl choose one OR another, not both.. 
17:43:12 <nikolam> And now when I have /root/.google_authenticator file and I enter verification code, it logs me in withotut asking for password 
17:48:16 <nikolam> And that github scrip seems that it is not working, after changing path to /tools/ for global zone. first two checks works , second two dees not : "/etc/ssh/sshd_config": 1: bad flag in substitute command: 'h'
20:02:26 <nikolam> Nobory use it on global zone? 
20:19:47 <pjustice> Er, -i is supposed to take a filename extension for renaming the old version of the file
20:20:45 <pjustice> I.e. the line should be something like --- sed -i.bak 's/^\(PermitRootLogin \).*/\1Yes/' /etc/ssh/sshd_config