-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 14/08/13 07:54, Gert Doering wrote: > We use something else called "Kobil SecOVID", which is not > time-based but "press the button, get an OTP token" based - but the > principle is similar. The Kobil auth server speaks RADIUS, so our > OpenVPN server uses plugin-auth-pam to authenticate vs. PAM, and > then pam_radius to talk to the Kobil server - it could use the > openvpn radius plugin as well, but back in the day, that was more > complicated to setup.
Just another alternative ... LinOTP which supports a vast amount of both hardware and software tokens. Supports PAM, SAML, OpenID, FreeRADIUS (via rlm_perl). And the commerical LinOTP edition adds SQL, LDAP, AD and native FreeRADIUS integration in addition as well. <http://www.linotp.org/features.html> - -- kind regards, David Sommerseth -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlILqf0ACgkQDC186MBRfrqXmACfeYCl0nui0RmZHXwLylRHH9jZ Ov0AoJaG6uebSZjLx9Bvp5YwTalvw0qD =gkOx -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users