On Sat, Apr 04, 2020 at 04:33:58PM +0200, Dajka Tam?s wrote: > I don't reccommend using 'auth-pass-verify' since it block the execution. > Using the pam-auth plugin is a better idea. >
Depnds. I have to read up on the pam application on FreeBSD. > -----Original Message----- > From: The Doctor via Openvpn-users > [mailto:openvpn-users@lists.sourceforge.net] > Sent: Saturday, April 4, 2020 4:07 PM > To: Gert Doering <g...@greenie.muc.de> > Cc: openvpn-users@lists.sourceforge.net > Subject: Re: [Openvpn-users] First time set up using openvpn > > On Sat, Apr 04, 2020 at 03:57:21PM +0200, Gert Doering wrote: > > Hi, > > > > On Sat, Apr 04, 2020 at 06:54:48AM -0600, The Doctor wrote: > > > > As soon as you have the TLS-Auth part sorted out - there is no > > > > authentication backend configured on the server, so it won't do > > > > LDAP or radius. As for "how to do this", there's many possible > > > > ways > > > > - you can use a plugin (plugin_auth_pam is a good start, and then > > > > pam_radius or pam_ldap), or a script (--auth-user-pass-verify, see > > > > the man page), ... > > > > > > pam has always been problematic even on SASl, hence why I avoid it. > > > > Then have a good look at "--auth-user-pass-verify", which will call a > > script with username+password provided, and the script can do whatever > > you want to verify these - LDAP, Radius, ... > > Already started on pass verify. > > > gert > > -- > > "If was one thing all people took for granted, was conviction that if > > you feed honest figures into a computer, honest figures come out. > > Never doubted it myself till I met a computer with a sense of humor." > > Robert A. Heinlein, The Moon is a Harsh > > Mistress > > > > Gert Doering - Munich, Germany > g...@greenie.muc.de > > > > -- > Member - Liberal International This is doctor@@nl2k.ab.ca Ici > doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President > Republic!Beware AntiChrist rising! > https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on > Atheism Those who cannot win on facts rely upon slander. -unknown > > > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users > -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Those who cannot win on facts rely upon slander. -unknown _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
