I'm trying to setup a Debian VM that uses two factor authentication for logins via google-authenticator's PAM plugin. The google-authenticator part is working great through regular console logins or through gdm3, however, when I installed xrdp, I can't seem to get the xrdp login screen to work.
auth required pam_google_authenticator.so to
/etc/pam.d/xrdp-sesman, however, it seems as if the xrdp login screen is unable to prompt for the verification code. The login just fails instead.
Has anyone been able to get google-authenticator working with xrdp? Alternatively, are there any other options for getting remote desktop-type logins that will work with two-factor authentication?
This will be used for users who are not familiar with Linux, so I can't just ask them to tunnel X11 connections through SSH or something similar, etc.