How to log in with Google Authentication Only?

[ITSMGuy]

I've set up Google authenticator to work properly for those users that have set it up but I want to only use authenticator as the authentication. How do I disable password authentication?

 

[mrcrossroads]

I've set up Google authenticator to work properly for those users that have set it up but I want to only use authenticator as the authentication. How do I disable password authentication?

For logging into your PC? Don't think it's possible.

 

[ITSMGuy]

I found it.

in /etc/pam.d/gdm-password replace
auth required pam_succeed_if.so user != root quier_success with
auth sufficient pam_succeed_if.so user != root

Or you can create a group and use passwordless authentication based on group by replacing the above with
auth sufficient pam_succeed_if.so user ingroup GROUPNAME

Add the users to that group and restart gdm 'systemctl restart gdm'

Of course, to enable google authenticator in the first place you have to install it:

Debian:
apt install libpam-google-authenticator

Fedora:
dnf install google-authenticator

Each user has to run 'google-authenticator' and follow the prompts.

 

[mrcrossroads]

I found it.

in /etc/pam.d/gdm-password replace
auth required pam_succeed_if.so user != root quier_success with
auth sufficient pam_succeed_if.so user != root

Or you can create a group and use passwordless authentication based on group by replacing the above with
auth sufficient pam_succeed_if.so user ingroup GROUPNAME

Add the users to that group and restart gdm 'systemctl restart gdm'

Of course, to enable google authenticator in the first place you have to install it:

Debian:
apt install libpam-google-authenticator

Fedora:
dnf install google-authenticator

Each user has to run 'google-authenticator' and follow the prompts.

That's awesome! Keep us posted how it goes.