{"id":33654,"date":"2026-10-16T12:00:00","date_gmt":"2026-10-16T04:00:00","guid":{"rendered":"https:\/\/cn.hostease.com\/blog\/?p=33654"},"modified":"2026-10-16T16:18:16","modified_gmt":"2026-10-16T08:18:16","slug":"server-ssh-google-authenticator","status":"publish","type":"post","link":"https:\/\/cn.hostease.com\/blog\/guides\/server-ssh-google-authenticator\/","title":{"rendered":"SSH\u53cc\u56e0\u5b50\u8ba4\u8bc1\u914d\u7f6e\uff1aGoogle Authenticator \u52a8\u6001\u53e3\u4ee4\u767b\u5f55\u5b9e\u6218"},"content":{"rendered":"<p>\u5982\u679c\u4f60\u7684\u670d\u52a1\u5668\u53ea\u9760\u5bc6\u7801\u767b\u5f55 SSH\uff0c\u90a3\u4e48\u5b83\u6bcf\u5929\u90fd\u5728\u627f\u53d7\u66b4\u529b\u7834\u89e3\u7684\u8bd5\u63a2\uff1a\u516c\u7f51\u4e0a\u4e00\u53f0\u666e\u901a <a href=\"https:\/\/cn.hostease.com\/vps\/\">VPS<\/a>\uff08<a href=\"https:\/\/cn.hostease.com\/vps\/\">\u865a\u62df\u4e13\u7528\u670d\u52a1\u5668<\/a>\uff09\u6bcf\u5929\u88ab\u5c1d\u8bd5\u767b\u5f55\u7684\u6b21\u6570\u53ef\u4ee5\u8f7b\u677e\u8d85\u8fc7\u6570\u5343\u6b21\uff0c\u53ea\u8981\u5bc6\u7801\u5f3a\u5ea6\u7a0d\u5f31\u6216\u8005\u66fe\u7ecf\u6cc4\u9732\uff0c\u653b\u51fb\u8005\u62ff\u5230\u51ed\u636e\u5c31\u80fd\u76f4\u63a5\u8fdb\u5165\u7cfb\u7edf\u3002\u672c\u6587\u8981\u89e3\u51b3\u7684\u5c31\u662f\u8fd9\u4e2a\u95ee\u9898\u2014\u2014\u5982\u4f55\u4e3a SSH \u767b\u5f55\u518d\u52a0\u4e00\u9053\u52a8\u6001\u53e3\u4ee4\u9a8c\u8bc1\uff0c\u8ba9&#8221;\u5bc6\u7801+\u4e00\u6b21\u6027\u9a8c\u8bc1\u7801&#8221;\u7ec4\u5408\u6210\u4e3a\u9ed8\u8ba4\u767b\u5f55\u65b9\u5f0f\u3002<\/p>\n<p>\u672c\u6587\u4ee5\u6700\u5e38\u89c1\u7684 Google Authenticator\uff08\u8c37\u6b4c\u9a8c\u8bc1\u5668\uff09\u4e3a\u4f8b\uff0c\u5728 Linux \u670d\u52a1\u5668\u4e0a\u5b8c\u6210 SSH \u53cc\u56e0\u5b50\u8ba4\u8bc1\uff08Two-Factor Authentication\uff0c\u7b80\u79f0 2FA\uff09\u914d\u7f6e\u3002\u6838\u5fc3\u601d\u8def\u662f\uff1a\u670d\u52a1\u5668\u7aef\u5b89\u88c5\u57fa\u4e8e\u65f6\u95f4\u7684\u4e00\u6b21\u6027\u53e3\u4ee4\uff08TOTP\uff0cTime-based One-Time Password\uff09\u6a21\u5757\uff0c\u624b\u673a\u626b\u7801\u7ed1\u5b9a\u540e\uff0c\u6bcf\u6b21\u767b\u5f55\u9664\u4e86\u5bc6\u7801\uff0c\u8fd8\u8981\u8f93\u5165\u4e00\u4e2a 30 \u79d2\u5237\u65b0\u4e00\u6b21\u7684 6 \u4f4d\u52a8\u6001\u7801\u3002\u5bc6\u7801\u5373\u4f7f\u6cc4\u9732\uff0c\u6ca1\u6709\u4f60\u7684\u624b\u673a\uff0c\u653b\u51fb\u8005\u4f9d\u7136\u8fdb\u4e0d\u6765\u3002<\/p>\n<p>\u4e0b\u6587\u6309\u771f\u5b9e\u64cd\u4f5c\u987a\u5e8f\u5c55\u5f00\uff1a\u53cc\u56e0\u5b50\u8ba4\u8bc1\u89e3\u51b3\u4ec0\u4e48\u95ee\u9898\u3001\u670d\u52a1\u5668\u7aef\u5b89\u88c5\u914d\u7f6e\u3001\u624b\u673a\u7aef\u7ed1\u5b9a\u3001\u767b\u5f55\u6d4b\u8bd5\u4e0e\u56de\u9000\u4fdd\u62a4\uff0c\u6700\u540e\u662f\u5bc6\u94a5\u767b\u5f55\u5171\u5b58\u7b49\u8fdb\u9636\u573a\u666f\u3002\u547d\u4ee4\u8986\u76d6 Ubuntu\/Debian \u4e0e CentOS \u4e24\u5927\u53d1\u884c\u7248\uff0c\u914d\u7f6e\u5b8c\u6210\u540e\u670d\u52a1\u5668\u767b\u5f55\u5b89\u5168\u6027\u4f1a\u6709\u8d28\u7684\u63d0\u5347\u3002<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/cn.hostease.com\/blog\/wp-content\/uploads\/2026\/10\/server-ssh-google-authenticator-cover.webp\" alt=\"\u670d\u52a1\u5668\u673a\u67dc\u914d\u7eff\u8272\u5b89\u5168\u76fe\u724c\u4e0e\u624b\u673a\u52a8\u6001\u53e3\u4ee4\u7684 SSH \u53cc\u56e0\u5b50\u8ba4\u8bc1\u5c01\u9762\u56fe\" loading=\"lazy\" \/><\/p>\n<h2>\u53cc\u56e0\u5b50\u8ba4\u8bc1\u5230\u5e95\u89e3\u51b3\u4e86\u4ec0\u4e48\u95ee\u9898<\/h2>\n<p>\u67d0\u53f0<a href=\"https:\/\/cn.hostease.com\/dedicated-server\/\">\u72ec\u7acb\u670d\u52a1\u5668<\/a>\u53ea\u8bbe\u4e86\u5bc6\u7801\u767b\u5f55\uff0c\u8fd0\u7ef4\u7528\u7684\u662f&#8221;\u516c\u53f8\u540d+2024&#8243;\u8fd9\u7c7b\u5f31\u5bc6\u7801\u3002\u7ba1\u7406\u5458\u53d1\u73b0\u5f02\u5e38\u6d41\u91cf\u540e\u6392\u67e5\uff0c\u786e\u8ba4\u653b\u51fb\u8005\u5df2\u901a\u8fc7 SSH \u66b4\u529b\u7834\u89e3\u767b\u5f55\u5e76\u690d\u5165\u6316\u77ff\u7a0b\u5e8f\u3002\u82e5\u5f53\u65f6\u5f00\u542f\u53cc\u56e0\u5b50\u8ba4\u8bc1\uff0c\u653b\u51fb\u8005\u62ff\u5230\u5bc6\u7801\u4e5f\u8fc7\u4e0d\u4e86\u52a8\u6001\u53e3\u4ee4\u8fd9\u4e00\u5173\u3002<\/p>\n<p>\u4ece\u653b\u51fb\u6210\u672c\u7b97\u4e00\u7b14\u8d26\uff1a12 \u4f4d\u968f\u673a\u5bc6\u7801\u88ab\u66b4\u529b\u7834\u89e3\u9700\u767e\u5e74\u4ee5\u4e0a\uff0c\u4f46\u5f88\u591a\u670d\u52a1\u5668\u7528\u7684\u662f\u53ef\u88ab\u5b57\u5178\u8986\u76d6\u7684\u5f31\u5bc6\u7801\uff0c\u653b\u51fb\u8005\u6bcf\u5c0f\u65f6\u53ef\u5c1d\u8bd5\u6570\u4e07\u6b21\u3002\u542f\u7528 2FA \u540e\uff0c\u653b\u51fb\u8005\u5fc5\u987b\u540c\u65f6\u7a81\u7834&#8221;\u4f60\u77e5\u9053\u7684\uff08\u5bc6\u7801\uff09&#8221;\u548c&#8221;\u4f60\u62e5\u6709\u7684\uff08\u9a8c\u8bc1\u5668\uff09&#8221;\u4e24\u9053\u5173\u5361\uff0c\u52a8\u6001\u53e3\u4ee4\u6bcf 30 \u79d2\u5931\u6548\uff0c\u91cd\u653e\u65e0\u6548\u3002<\/p>\n<p>\u53cc\u56e0\u5b50\u8ba4\u8bc1\u4e0d\u66ff\u4ee3\u5bc6\u94a5\u767b\u5f55\uff0c\u800c\u662f\u4e92\u8865\uff1a\u5df2\u7528 SSH \u5bc6\u94a5\u7684\uff0c\u628a\u52a8\u6001\u53e3\u4ee4\u5f53\u7b2c\u4e8c\u5c42\u4fdd\u9669\uff1b\u8fd8\u5728\u7528\u5bc6\u7801\u7684\uff0c2FA \u89c1\u6548\u6700\u5feb\u2014\u2014\u4e60\u60ef\u4e0d\u53d8\uff0c\u53ea\u662f\u5bc6\u7801\u540e\u591a\u8f93\u4e00\u4e2a 6 \u4f4d\u6570\u5b57\u3002<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/cn.hostease.com\/blog\/wp-content\/uploads\/2026\/10\/server-ssh-google-authenticator-comparison.webp\" alt=\"\u4ec5\u5bc6\u7801\u767b\u5f55\u4e0e\u5bc6\u7801\u52a0\u52a8\u6001\u53e3\u4ee4\u767b\u5f55\u7684\u5b89\u5168\u6027\u5bf9\u6bd4\u56fe\" loading=\"lazy\" \/><\/p>\n<h2>\u670d\u52a1\u5668\u7aef\u5b89\u88c5\u4e0e PAM \u6a21\u5757\u914d\u7f6e<\/h2>\n<p>\u6574\u4e2a\u914d\u7f6e\u5206\u4e09\u6b65\uff1a\u5b89\u88c5 TOTP \u6a21\u5757\u3001\u4fee\u6539 PAM\uff08Pluggable Authentication Modules\uff0c\u53ef\u63d2\u62d4\u8ba4\u8bc1\u6a21\u5757\uff09\u914d\u7f6e\u3001\u8c03\u6574 sshd \u53c2\u6570\u3002<\/p>\n<p><strong>\u7b2c\u4e00\u6b65\uff1a\u5b89\u88c5 Google Authenticator PAM \u6a21\u5757\u3002<\/strong><\/p>\n<p>Ubuntu\/Debian\uff1a<\/p>\n<pre><code class=\"language-bash\">sudo apt update\nsudo apt install libpam-google-authenticator -y\n<\/code><\/pre>\n<p>CentOS\/RHEL \u5148\u542f\u7528 EPEL \u6e90\uff1a<\/p>\n<pre><code class=\"language-bash\">sudo dnf install epel-release -y\nsudo dnf install google-authenticator -y\n<\/code><\/pre>\n<p><strong>\u7b2c\u4e8c\u6b65\uff1a\u4e3a\u5f53\u524d\u7528\u6237\u751f\u6210\u5bc6\u94a5\u3002<\/strong><\/p>\n<p>\u5207\u6362\u5230\u8981\u5f00\u542f\u53cc\u56e0\u5b50\u8ba4\u8bc1\u7684\u7528\u6237\uff08\u4e0d\u8981\u7ed9\u6240\u6709\u7528\u6237\u6279\u91cf\u5f00\uff09\uff0c\u6267\u884c\uff1a<\/p>\n<pre><code class=\"language-bash\">google-authenticator\n<\/code><\/pre>\n<p>\u521d\u59cb\u5316\u4f1a\u4f9d\u6b21\u8be2\u95ee\u51e0\u4e2a\u95ee\u9898\uff0c\u63a8\u8350\u56de\u7b54\uff1a<\/p>\n<ul>\n<li>\u662f\u5426\u4f7f\u7528\u57fa\u4e8e\u65f6\u95f4\u7684\u4ee4\u724c\uff1f\u56de\u7b54 <code>y<\/code>\uff08\u52a8\u6001\u7801\u6bcf 30 \u79d2\u5237\u65b0\uff0c\u670d\u52a1\u5668\u9700\u63d0\u524d\u5f00\u542f NTP \u65f6\u95f4\u540c\u6b65\uff0c\u5426\u5219\u9a8c\u8bc1\u4f1a\u5931\u8d25\uff09<\/li>\n<li>\u662f\u5426\u66f4\u65b0\u914d\u7f6e\u6587\u4ef6\uff1f\u56de\u7b54 <code>y<\/code><\/li>\n<li>\u662f\u5426\u7981\u6b62\u540c\u4e00\u4ee4\u724c\u591a\u6b21\u4f7f\u7528\uff1f\u56de\u7b54 <code>y<\/code>\uff08\u9632\u6b62 30 \u79d2\u7a97\u53e3\u5185\u7684\u91cd\u653e\u653b\u51fb\uff09<\/li>\n<li>\u662f\u5426\u6269\u5c55\u4ee4\u724c\u6709\u6548\u671f\u5230 4 \u4e2a\u65f6\u95f4\u7a97\u53e3\uff1f\u56de\u7b54 <code>y<\/code>\uff08\u5bb9\u5fcd 1-2 \u5206\u949f\u65f6\u949f\u504f\u5dee\uff09<\/li>\n<li>\u662f\u5426\u5f00\u542f\u9650\u901f\u4fdd\u62a4\uff1f\u56de\u7b54 <code>y<\/code>\uff08\u653b\u51fb\u8005\u6bcf 30 \u79d2\u6700\u591a\u8bd5 3 \u6b21\uff09<\/li>\n<\/ul>\n<p>\u6267\u884c\u5b8c\u6210\u540e\uff0c\u7ec8\u7aef\u4f1a\u8f93\u51fa\u4e8c\u7ef4\u7801\u3001\u5bc6\u94a5\u548c 5 \u4e2a\u5e94\u6025\u522e\u522e\u7801\uff08scratch codes\uff09\u3002\u4e8c\u7ef4\u7801\u7528\u624b\u673a App \u626b\u7801\u7ed1\u5b9a\uff1b\u522e\u522e\u7801\u5fc5\u987b\u79bb\u7ebf\u6284\u5199\u4fdd\u5b58\u2014\u2014\u624b\u673a\u4e22\u5931\u65f6\u5c31\u9760\u5b83\u4eec\u7d27\u6025\u767b\u5f55\u3002<\/p>\n<p><strong>\u7b2c\u4e09\u6b65\uff1a\u4fee\u6539 PAM \u4e0e sshd \u914d\u7f6e\u3002<\/strong><\/p>\n<p>\u7f16\u8f91 <code>\/etc\/pam.d\/sshd<\/code>\uff0c\u5f00\u5934\u52a0\u5165\u4e00\u884c\uff1a<\/p>\n<pre><code class=\"language-bash\">auth required pam_google_authenticator.so\n<\/code><\/pre>\n<p>\u7f16\u8f91 <code>\/etc\/ssh\/sshd_config<\/code>\uff0c\u786e\u8ba4\u4e09\u9879\u914d\u7f6e\uff1a<\/p>\n<pre><code class=\"language-bash\">ChallengeResponseAuthentication yes\nUsePAM yes\nPasswordAuthentication yes\n<\/code><\/pre>\n<p>\u65b0\u7248\u7cfb\u7edf\u53ef\u7528 <code>KbdInteractiveAuthentication yes<\/code> \u66ff\u4ee3\u7b2c\u4e00\u9879\uff0c\u4e8c\u9009\u4e00\u5373\u53ef\u3002\u7136\u540e\u91cd\u542f SSH \u670d\u52a1\uff1a<\/p>\n<pre><code class=\"language-bash\">sudo systemctl restart sshd\n<\/code><\/pre>\n<p>\u6ce8\u610f\uff1a<code>pam_google_authenticator.so<\/code> \u8fd9\u4e00\u884c\u8981\u52a0\u5728 <code>@include common-auth<\/code> \u4e4b\u524d\uff0c\u5426\u5219\u4f1a\u51fa\u73b0&#8221;\u9a8c\u8bc1\u7801\u9519\u4e86\u4ecd\u7136\u653e\u884c&#8221;\u7684\u903b\u8f91\u6f0f\u6d1e\uff0c\u914d\u7f6e\u987a\u5e8f\u51b3\u5b9a\u8ba4\u8bc1\u94fe\u7684\u4e25\u5bc6\u7a0b\u5ea6\u3002<\/p>\n<h2>\u624b\u673a\u7aef\u7ed1\u5b9a\u4e0e\u767b\u5f55\u6d4b\u8bd5<\/h2>\n<p>\u670d\u52a1\u5668\u7aef\u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u8fd8\u8981\u5728\u624b\u673a\u4e0a\u7ed1\u5b9a\u5e76\u5b8c\u6210\u6d4b\u8bd5\uff0c\u624d\u80fd\u6b63\u5f0f\u542f\u7528\u5f3a\u5236\u9a8c\u8bc1\u3002<\/p>\n<p><strong>\u7ed1\u5b9a\u9a8c\u8bc1\u5668 App\u3002<\/strong><\/p>\n<p>\u5728\u624b\u673a\u4e0a\u5b89\u88c5 Google Authenticator\uff08iOS \u548c Android \u5e94\u7528\u5546\u5e97\u5747\u53ef\u514d\u8d39\u4e0b\u8f7d\uff09\uff0c\u4e5f\u517c\u5bb9 Microsoft Authenticator\u3001FreeOTP \u7b49\u652f\u6301 TOTP \u6807\u51c6\u7684\u9a8c\u8bc1\u5668\u3002\u6253\u5f00 App \u9009\u62e9&#8221;\u626b\u63cf\u4e8c\u7ef4\u7801&#8221;\uff0c\u5bf9\u51c6\u7ec8\u7aef\u4e0a\u7684\u4e8c\u7ef4\u7801\u626b\u7801\u5373\u53ef\u3002\u7ed1\u5b9a\u6210\u529f\u540e App \u7acb\u5373\u663e\u793a 6 \u4f4d\u52a8\u6001\u7801\uff0c\u6bcf 30 \u79d2\u81ea\u52a8\u5237\u65b0\u3002<\/p>\n<p>\u5982\u679c\u7ec8\u7aef\u65e0\u6cd5\u663e\u793a\u4e8c\u7ef4\u7801\uff08\u6bd4\u5982\u4e32\u53e3\u6216\u53d7\u9650\u73af\u5883\uff09\uff0c\u628a\u547d\u4ee4\u8f93\u51fa\u4e2d\u7684\u5bc6\u94a5\u624b\u52a8\u8f93\u5165 App\uff1a\u9009\u62e9&#8221;\u8f93\u5165\u8bbe\u7f6e\u5bc6\u94a5&#8221;\uff0c\u8d26\u6237\u540d\u5efa\u8bae\u586b\u670d\u52a1\u5668 IP \u6216\u522b\u540d\u65b9\u4fbf\u533a\u5206\uff0c\u5bc6\u94a5\u680f\u7c98\u8d34\u90a3\u4e32\u5b57\u6bcd\u6570\u5b57\u7ec4\u5408\u5373\u53ef\u3002<\/p>\n<p><strong>\u4fdd\u6301\u5f53\u524d\u4f1a\u8bdd\u4e0d\u9000\u51fa\uff0c\u5f00\u65b0\u7a97\u53e3\u6d4b\u8bd5\u3002<\/strong><\/p>\n<p>\u8fd9\u662f\u6574\u7bc7\u6559\u7a0b\u6700\u91cd\u8981\u7684\u4e00\u6761\u5b88\u5219\uff1a\u91cd\u542f sshd \u540e\uff0c\u5f53\u524d\u5df2\u767b\u5f55\u4f1a\u8bdd\u4e0d\u4f1a\u65ad\u5f00\uff0c\u8fd9\u662f\u5929\u7136\u7684&#8221;\u540e\u6094\u836f&#8221;\u3002\u6b64\u65f6\u4e0d\u8981\u9000\u51fa\u5f53\u524d\u7a97\u53e3\uff0c\u5148\u65b0\u5f00\u4e00\u4e2a\u7ec8\u7aef\u9a8c\u8bc1\u53cc\u56e0\u5b50\u8ba4\u8bc1\u662f\u5426\u6b63\u5e38\uff1a<\/p>\n<pre><code class=\"language-bash\">ssh youruser@your-server-ip\n# \u4f9d\u6b21\u63d0\u793a\u8f93\u5165\uff1a\n# Verification code: \uff08\u8f93\u5165\u624b\u673a\u4e0a\u7684 6 \u4f4d\u52a8\u6001\u7801\uff09\n# Password: \uff08\u8f93\u5165\u7528\u6237\u5bc6\u7801\uff09\n<\/code><\/pre>\n<p>\u4e24\u4e2a\u51ed\u636e\u90fd\u6b63\u786e\u5e76\u80fd\u8fdb\u5165\u7cfb\u7edf\uff0c\u8bf4\u660e\u914d\u7f6e\u6210\u529f\uff1b\u65b0\u7a97\u53e3\u88ab\u6321\u4f4f\u65f6\uff0c\u53ef\u7acb\u5373\u5728\u65e7\u4f1a\u8bdd\u91cc\u56de\u6eda\u914d\u7f6e\uff0c\u4e0d\u4f1a\u628a\u81ea\u5df1\u9501\u5728\u95e8\u5916\u3002<\/p>\n<p><strong>\u5e38\u89c1\u5931\u8d25\u73b0\u8c61\u6392\u67e5\u3002<\/strong><\/p>\n<p>\u4e24\u7c7b\u5e38\u89c1\u62a5\u9519\uff1a\u4e00\u662f\u52a8\u6001\u7801\u6b63\u786e\u4ecd\u88ab\u62d2\uff0c\u591a\u662f\u670d\u52a1\u5668\u4e0e\u624b\u673a\u65f6\u949f\u504f\u5dee\u8fc7\u5927\uff0c\u6267\u884c <code>sudo timedatectl set-ntp true<\/code> \u5f00\u542f\u65f6\u95f4\u540c\u6b65\u540e\u91cd\u8bd5\uff1b\u4e8c\u662f\u767b\u5f55\u65f6\u6839\u672c\u4e0d\u63d0\u793a\u9a8c\u8bc1\u7801\uff0c\u901a\u5e38\u662f PAM \u884c\u4f4d\u7f6e\u4e0d\u5bf9\u6216 <code>UsePAM yes<\/code> \u672a\u751f\u6548\uff0c\u68c0\u67e5 <code>\/etc\/pam.d\/sshd<\/code> \u662f\u5426\u4fdd\u5b58\u3001sshd \u662f\u5426\u771f\u7684\u91cd\u542f\u3002<\/p>\n<h2>\u56de\u9000\u4fdd\u62a4\u4e0e\u5bc6\u94a5\u767b\u5f55\u5171\u5b58<\/h2>\n<p>\u53cc\u56e0\u5b50\u8ba4\u8bc1\u6700\u5927\u7684\u98ce\u9669\u4e0d\u662f\u914d\u7f6e\u5931\u8d25\uff0c\u800c\u662f\u5931\u8d25\u540e\u628a\u81ea\u5df1\u9501\u5728\u95e8\u5916\u3002\u9664\u4e86&#8221;\u4fdd\u7559\u65e7\u4f1a\u8bdd\u518d\u6d4b\u8bd5&#8221;\uff0c\u8fd8\u6709\u4e24\u9053\u4fdd\u9669\u503c\u5f97\u63d0\u524d\u5e03\u597d\u3002<\/p>\n<p><strong>\u7b2c\u4e00\u9053\u4fdd\u9669\uff1a\u5e94\u6025\u522e\u522e\u7801\u3002<\/strong> \u521d\u59cb\u5316\u65f6\u8f93\u51fa\u7684 5 \u4e2a\u4e00\u6b21\u6027\u5e94\u6025\u7801\uff0c\u6bcf\u4e2a\u53ea\u80fd\u7528\u4e00\u6b21\uff0c\u6253\u5370\u6216\u6284\u5199\u5230\u79bb\u7ebf\u5904\uff08\u4e0d\u8981\u5b58\u624b\u673a\u91cc\uff09\u3002\u624b\u673a\u6ca1\u7535\u3001\u9a8c\u8bc1\u5668\u8bef\u5220\u65f6\uff0c\u8f93\u5165\u4efb\u610f\u4e00\u4e2a\u5e94\u6025\u7801\u5373\u53ef\u66ff\u4ee3\u52a8\u6001\u7801\u767b\u5f55\u3002<\/p>\n<p><strong>\u7b2c\u4e8c\u9053\u4fdd\u9669\uff1a\u63a7\u5236\u53f0\u6551\u63f4\u901a\u9053\u3002<\/strong> \u5e26\u667a\u80fd\u5e73\u53f0\u7ba1\u7406\u63a5\u53e3\uff08IPMI\uff0cIntelligent Platform Management Interface\uff09\u7684\u673a\u5668\u786e\u8ba4\u5e26\u5916\u53e3\u53ef\u7528\uff1b<a href=\"https:\/\/cn.hostease.com\/vps\/\">\u4e91\u4e3b\u673a<\/a>\u786e\u8ba4 VNC\uff08\u865a\u62df\u7f51\u7edc\u63a7\u5236\u53f0\uff09\u6551\u63f4\u5165\u53e3\u53ef\u7528\u3002SSH \u914d\u7f6e\u51fa\u9519\u65f6\uff0c\u8fd9\u4e9b\u662f\u6700\u540e\u7684\u6551\u547d\u7a3b\u8349\u3002<\/p>\n<p>\u5df2\u7ecf\u5728\u7528 SSH \u5bc6\u94a5\u767b\u5f55\u7684\u56e2\u961f\uff0c\u53ef\u4ee5\u91c7\u7528&#8221;\u5bc6\u94a5\u514d\u5bc6 + \u52a8\u6001\u7801\u4e8c\u6b21\u9a8c\u8bc1&#8221;\u7ec4\u5408\uff0c\u628a\u5bc6\u7801\u4ece\u8ba4\u8bc1\u94fe\u4e2d\u53bb\u6389\uff1a<code>\/etc\/pam.d\/sshd<\/code> \u4fdd\u6301\u4e0d\u53d8\uff0c<code>sshd_config<\/code> \u4e2d\u8bbe\u7f6e\uff1a<\/p>\n<pre><code class=\"language-bash\">PubkeyAuthentication yes\nAuthenticationMethods publickey,keyboard-interactive\n<\/code><\/pre>\n<p>\u767b\u5f55\u6d41\u7a0b\u53d8\u6210\uff1a\u5bc6\u94a5\u901a\u8fc7\u540e\u518d\u8f93\u5165\u52a8\u6001\u7801\uff0c\u5bc6\u7801\u5f7b\u5e95\u9000\u51fa\u8ba4\u8bc1\u94fe\u3002\u653b\u51fb\u9762\u4ece&#8221;\u5bc6\u7801+\u9a8c\u8bc1\u7801&#8221;\u7f29\u5c0f\u5230&#8221;\u79c1\u94a5+\u9a8c\u8bc1\u7801&#8221;\uff0c\u5b89\u5168\u6027\u663e\u8457\u66f4\u9ad8\u3002<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/cn.hostease.com\/blog\/wp-content\/uploads\/2026\/10\/server-ssh-google-authenticator-architecture.webp\" alt=\"SSH \u767b\u5f55\u4f9d\u6b21\u901a\u8fc7\u5bc6\u94a5\u69fd\u4f4d\u4e0e\u52a8\u6001\u53e3\u4ee4\u69fd\u4f4d\u540e\u5230\u8fbe\u670d\u52a1\u5668\u7684\u67b6\u6784\u793a\u610f\u56fe\" loading=\"lazy\" \/><\/p>\n<p>\u591a\u53f0\u670d\u52a1\u5668\u7edf\u4e00\u7ba1\u7406\uff1a\u6bcf\u53f0\u5355\u72ec\u6267\u884c <code>google-authenticator<\/code> \u751f\u6210\u5bc6\u94a5\uff0cApp \u91cc\u6309\u4e3b\u673a\u540d\u5efa\u6761\u76ee\u5373\u53ef\u3002\u4e0d\u8981\u628a\u540c\u4e00\u53f0\u670d\u52a1\u5668\u7684\u5bc6\u94a5\u4e8c\u7ef4\u7801\u5206\u4eab\u7ed9\u591a\u4eba\u2014\u2014\u6b63\u786e\u65b9\u5f0f\u662f\u6bcf\u4f4d\u7ba1\u7406\u5458\u7528\u5404\u81ea\u624b\u673a\u5206\u522b\u7ed1\u5b9a\uff0c<code>.google_authenticator<\/code> \u652f\u6301\u591a\u5bc6\u94a5\u5171\u5b58\u3002<\/p>\n<h2>\u914d\u5408 2FA \u7684\u5176\u4ed6\u52a0\u56fa\u63aa\u65bd<\/h2>\n<p>\u52a8\u6001\u53e3\u4ee4\u6321\u4f4f\u66b4\u529b\u7834\u89e3\u7684\u6700\u540e\u4e00\u51fb\uff0c\u4f46\u5b8c\u6574\u7684\u767b\u5f55\u52a0\u56fa\u8fd8\u5305\u62ec\u5916\u56f4\u63aa\u65bd\uff0c\u6bd4\u5982<a href=\"https:\/\/cn.hostease.com\/blog\/vps-firewall-iptables-nftables-ufw-guide\/\">VPS \u9632\u706b\u5899\u4e09\u5957\u5de5\u5177\u7684\u914d\u7f6e\u65b9\u6cd5<\/a>\uff0c\u6bcf\u9879\u53ea\u9700\u51e0\u5206\u949f\uff1a<\/p>\n<ul>\n<li>\u628a SSH \u9ed8\u8ba4\u7aef\u53e3 22 \u6539\u4e3a 20000 \u4ee5\u4e0a\u9ad8\u4f4d\u7aef\u53e3\uff0c\u8fc7\u6ee4\u7edd\u5927\u591a\u6570\u65e0\u5dee\u522b\u626b\u63cf\uff0c\u6539 <code>sshd_config<\/code> \u7684 <code>Port<\/code> \u5b57\u6bb5\u5373\u53ef<\/li>\n<li>\u7528 <code>AllowUsers youruser<\/code> \u767d\u540d\u5355\u9650\u5b9a\u53ef\u767b\u5f55\u8d26\u6237\uff0c\u5c01\u6b7b root \u8fdc\u7a0b\u767b\u5f55\uff08<code>PermitRootLogin no<\/code>\uff09<\/li>\n<li>\u5b89\u88c5 fail2ban \u4e4b\u7c7b\u7684\u9632\u7206\u7834\u5de5\u5177\uff0c\u81ea\u52a8\u5c01\u7981\u8fde\u7eed\u5931\u8d25\u7684\u6765\u6e90 IP\uff0c\u914d\u5408<a href=\"https:\/\/cn.hostease.com\/blog\/nftables-practical\/\">nftables \u9632\u706b\u5899\u89c4\u5219\u5b9e\u6218<\/a>\u6536\u7a84\u7aef\u53e3\u66b4\u9732\u9762\uff0c\u4e0e 2FA \u5f62\u6210\u7eb5\u6df1\u9632\u5fa1<\/li>\n<li>\u5b9a\u671f\u68c0\u67e5 <code>\/var\/log\/auth.log<\/code>\uff08Debian \u7cfb\uff09\u6216 <code>\/var\/log\/secure<\/code>\uff08RHEL \u7cfb\uff09\uff0c\u786e\u8ba4\u662f\u5426\u4ecd\u6709\u5f02\u5e38\u5c1d\u8bd5<\/li>\n<\/ul>\n<p>\u8fd9\u4e9b\u63aa\u65bd\u4e0e 2FA \u5e76\u4e0d\u51b2\u7a81\uff1a\u7aef\u53e3\u548c\u767d\u540d\u5355\u51cf\u5c11\u65e0\u6548\u6d41\u91cf\uff0cfail2ban \u81ea\u52a8\u5c01\u7981\u653b\u51fb\u8005\uff0c2FA \u5728\u51ed\u636e\u6cc4\u9732\u65f6\u515c\u5e95\uff0c\u4e09\u5c42\u53e0\u52a0\u540e SSH \u66b4\u9732\u9762\u57fa\u672c\u6536\u655b\u3002<\/p>\n<p>\u6258\u7ba1\u5728 <a href=\"https:\/\/cn.hostease.com\/dedicated-server\/\">Hostease \u72ec\u7acb\u670d\u52a1\u5668<\/a>\u4e0a\u7684\u8bfb\u8005\uff0c\u53ef\u76f4\u63a5\u7528\u673a\u623f\u6551\u63f4\u63a7\u5236\u53f0\u4f5c\u5e26\u5916\u901a\u9053\u3002\u66f4\u591a\u5b9e\u6218\u5185\u5bb9\u89c1<a href=\"https:\/\/cn.hostease.com\/blog\/server\/\">\u670d\u52a1\u5668\u5206\u7c7b\u6559\u7a0b<\/a>\u3002<\/p>\n<h2>\u603b\u7ed3<\/h2>\n<p>\u56de\u987e\u6574\u4e2a\u6d41\u7a0b\uff1a\u5b89\u88c5 <code>libpam-google-authenticator<\/code>\u3001\u8fd0\u884c <code>google-authenticator<\/code> \u751f\u6210\u5bc6\u94a5\u4e0e\u5e94\u6025\u7801\u3001\u4fee\u6539 PAM \u4e0e sshd \u914d\u7f6e\u3001\u624b\u673a\u626b\u7801\u7ed1\u5b9a\u3001\u65b0\u7a97\u53e3\u9a8c\u8bc1\u767b\u5f55\u2014\u2014\u4e94\u6b65\u5b8c\u6210\u540e\uff0cSSH \u767b\u5f55\u5c31\u4ece&#8221;\u5355\u51ed\u5bc6\u7801&#8221;\u5347\u7ea7\u4e3a&#8221;\u5bc6\u7801+\u52a8\u6001\u53e3\u4ee4&#8221;\u53cc\u91cd\u4fdd\u62a4\u3002<\/p>\n<p>\u6700\u540e\u518d\u5f3a\u8c03\u4e09\u4e2a\u5b88\u5219\uff1a\u6539\u914d\u7f6e\u524d\u4fdd\u7559\u65e7\u4f1a\u8bdd\u3001\u5e94\u6025\u7801\u79bb\u7ebf\u4fdd\u5b58\u3001\u670d\u52a1\u5668\u4e0e\u624b\u673a\u65f6\u949f\u4fdd\u6301\u540c\u6b65\u2014\u2014\u8fd9\u4e09\u70b9\u8986\u76d6\u4e86\u7edd\u5927\u591a\u6570\u628a\u81ea\u5df1\u9501\u5728\u95e8\u5916\u7684\u7ffb\u8f66\u573a\u666f\u3002<\/p>\n<p>\u5982\u679c\u4f60\u9700\u8981\u4e00\u53f0\u53ef\u81ea\u7531\u914d\u7f6e\u9632\u706b\u5899\u4e0e SSH \u7b56\u7565\u7684\u670d\u52a1\u5668\uff0c\u53ef\u4ee5\u8003\u8651 <a href=\"https:\/\/cn.hostease.com\/vps\/\">Hostease VPS \u4e3b\u673a<\/a>\uff0c\u5b8c\u6574 root \u6743\u9650\u914d\u5408\u672c\u6587\u6559\u7a0b\uff0c\u51e0\u5206\u949f\u5373\u53ef\u90e8\u7f72\u3002\u4e5f\u6b22\u8fce\u5728\u8bc4\u8bba\u533a\u5206\u4eab\u4f60\u914d\u7f6e 2FA \u65f6\u8e29\u8fc7\u7684\u5751\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6559\u4f60\u5982\u4f55\u5728 Linux \u670d\u52a1\u5668\u4e0a\u914d\u7f6e SSH \u53cc\u56e0\u5b50\u8ba4\u8bc1\uff0c\u4f7f\u7528 Google Authenticator \u751f\u6210\u52a8\u6001\u53e3\u4ee4\uff0c\u89e3\u51b3\u5bc6\u7801\u6cc4\u9732\u4e0e\u66b4\u529b\u7834\u89e3\u98ce\u9669\uff0c\u9644\u5b8c\u6574\u914d\u7f6e\u6b65\u9aa4\u4e0e\u56de\u9000\u65b9\u6848\u3002<\/p>\n","protected":false},"author":2,"featured_media":33651,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3822],"tags":[5285,373,5286,157],"class_list":["post-33654","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guides","tag-googleauthenticator","tag-ssh","tag-5286","tag-157"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/cn.hostease.com\/blog\/wp-content\/uploads\/2026\/10\/server-ssh-google-authenticator-cover.webp","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/posts\/33654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/comments?post=33654"}],"version-history":[{"count":1,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/posts\/33654\/revisions"}],"predecessor-version":[{"id":33659,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/posts\/33654\/revisions\/33659"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/media\/33651"}],"wp:attachment":[{"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/media?parent=33654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/categories?post=33654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cn.hostease.com\/blog\/wp-json\/wp\/v2\/tags?post=33654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}