Hi Gert, sure, I've uploaded to github:
https://github.com/V1pr/openvpn-manager-auth There are still some hungarian comments, I did not have the time to get rid of them ;) Let me know, if you've any questions. Cheers, Tom > -----Original Message----- > From: Gert Doering [mailto:g...@greenie.muc.de] > Sent: Wednesday, April 28, 2021 5:52 PM > To: Dajka Tamás <vi...@vipernet.hu> > Cc: 'Selva Nair' <selva.n...@gmail.com>; 'Joe Patterson' > <j.m.patter...@gmail.com>; 'Openvpn Users' <openvpn- > us...@lists.sourceforge.net> > Subject: Re: [Openvpn-users] How to send 2nd factor to server ? > > Hi, > > On Wed, Apr 21, 2021 at 07:29:52PM +0200, Dajka Tamás wrote: > > If interested, I can send the script over ( PAM is used for user auth > > against an MS AD, and Radius is used for SecurID, since that > > handle???s challenge-response auths, so we can wait for the user???s > > answer to dynamic questions without blocking the whole auth flow). > > I'm certainly interested. > > > So, if you want to do a bit more complex stuff, than the management > > interface will be your friend (a perl/python/php/whatever daemon will > > be needed to connect to the mgmt interface and handle the requests > > from the openvpn server). > > > > For simple tasks a static-challenge + PAM auth can be more than enough. > > I've come to like the auth-PAM plugin (after I fought it for a while, and won :-) ). > It does async nowadays, and if it does what you need, it's easier to use than > setting up "things talking to management". > > I haven't looked into dynamic challenges yet, but it seems I should... > Selva: am I reading the source correctly, a plugin can not create a dynamic > challenge? > > gert > > > -- > "If was one thing all people took for granted, was conviction that if you feed > honest figures into a computer, honest figures come out. Never doubted it > myself till I met a computer with a sense of humor." > Robert A. Heinlein, The Moon is a Harsh Mistress > > Gert Doering - Munich, Germany g...@greenie.muc.de _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
