I just added 2FA through Google Authenticator on my centos 7 box. It's not that straight forward and I had to compile everything from multiple github repos, but it works pretty well.