I've set up google OTP authentication and RSA key authentication on my server but it's very anoing, after some time, to type OTP from phone every time. I would like to know if there is any possibility (trought PAM or /etc/security/access.conf) to ask about OTP only at first login and after that it'll trust my machine?
Also I'll like to ask if there is any possibility to set up one OTP generator for eg. 10 linux machines?
I'm managing several machines and if you got scroll through your phone and looks for right OTP it can be problematic so I want to login only with RSA key and all other people need to use 2FA.