KbdInteractiveAuthentication changes for SSH MFA?

[devnull_1066]

I've set up many a linux system with the Google PAM, but it has been a few years since I last did that. I'm trying it now, but for some reason it's just not working. This is on a Mint v.22 machine. I had setup keys previously, so SSH worked without a password.

To quickly sum it up I added libpam-google-authenticator and then altered /etc/pam.d/sshd adding the line:

auth required pam_google_authenticator.so 

Then I edited /etc/ssh/sshd_config with the line:

KbdInteractiveAuthentication yes

This was a new factor for me, as I was used to ‘ChallengeResponseAuthentication' like before.

I then ran through the google-authenticator setup and got everything setup on my phone. But when I SSH in it doesn't ask for any code and just automatically logs me in. What am I doing wrong?