loop enter google authenticator code after enabled oslogin 2fa

[陳冠志]

I have problem to login compute engine. Before enable oslogin I could login compute engine.

After enabled oslogin and oslogin-2fa, it loop the google 2fa verification window when I entering the google authenticator code. Please help,  thanks.

[Bruno (Google Cloud Support)]

Hello ~ For OSLogin and 2FA configuration, it's recommended to follow the instructions from this documention [1] including the limitations [2] and user IAM permission [3].

The limitations and permissions are common issues with OSLogin. That being said, I suggest to use gcloud [4] command with the flag `--verbose=debug` & `--ssh-flag="-vvv"` to get a better understanding on your connection attempts.

The SSH command [5] will look something like this one:
gcloud compute ssh [USER@INSTANCE] --verbose=debug --ssh-flag="-vvv"

For going any further in the SSH troubleshoot, we have a complet guide here [6] that worth to be mentioned.

--

[1] https://cloud.google.com/compute/docs/oslogin/setup-two-factor-authentication
[2] https://cloud.google.com/compute/docs/oslogin/setup-two-factor-authentication#limitations
[3] https://cloud.google.com/compute/docs/oslogin/setup-two-factor-authentication#grant-iam-roles

[4] https://cloud.google.com/sdk/gcloud
[5] https://cloud.google.com/sdk/gcloud/reference/compute/ssh

[6] https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-ssh

[陳冠志]

This problem has been solved.

Thank you.

Bruno (Google Cloud Support) 在 2022年3月2日 星期三上午2:25:55 [UTC+8] 的信中寫道：