Hacker News Reader

Could a user bypass this by using: ssh user@host.com -Tv 'bash' ?

The command you pass in is available to the command="" script in SSH_ORIGINAL_COMMAND, so you can exec() that or ignore it

Just tried it and it still prompts for the auth code

Thanks for the follow up! Will continue to play with it.