Hi,

On Tue, Jan 23, 2018 at 11:40 AM, Martin T <m4rtn...@gmail.com> wrote:
> Hi!
>
> I have configured OpenVPN server to use openvpn-plugin-auth-pam.so
> plugin. Configuration statement for this is following:
>
> plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so 
> /etc/pam.d/openvpn
>
> In /etc/pam.d/openvpn configuration-file, I use pam_access.so plugin.
> It requires client IPv4/IPv6 address. However, according to
> pam_access.so plugin debug log, it does not receive it:

IIRC, auth_pam plugin does not set PAM_RHOST, so hostname won't be available.

>
> pam_access(openvpn:auth): cannot determine tty or remote hostname,
> using service openvpn
>
> Is it possible to fix this with configuration change?

I do not think so -- unless you change the origins in auth.conf to
ALL, disabling the remote host check which is not what you want.

Selva

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to