[Openvpn-devel] Bug or Feature? Username in environment in auth-user-pass-verify

2017-06-14 Thread Steven Haigh
Hi all, I'm just trying to figure out if its expected behaviour to have the 'username' set in the environment when using the auth-user-pass-verify script. My observations with 2.4.2 seems that even when auth-user-pass-verify is called with via-file, the username is set in the environment. Th

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 12:05:49 AM AEST David Sommerseth wrote: > On 14/06/17 15:32, Steven Haigh wrote: > > Hi all, > > > > No further comments or requests on the openvpn-users lists. > > Reposting here for further criticism / comments :) > > > > I did have one thought though, do I need to pu

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 1:13:16 AM AEST Steven Haigh wrote: > On Thursday, 15 June 2017 12:42:53 AM AEST Selva Nair wrote: > > On Wed, Jun 14, 2017 at 9:32 AM, Steven Haigh wrote: > > > script-security 2 > > > client-connect /etc/openvpn/yubikey-auth-tokens > > > auth-user-pass-verify

Re: [Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
On Thursday, 15 June 2017 12:42:53 AM AEST Selva Nair wrote: > On Wed, Jun 14, 2017 at 9:32 AM, Steven Haigh wrote: > > script-security 2 > > client-connect /etc/openvpn/yubikey-auth-tokens > > auth-user-pass-verify /etc/openvpn/yubikey-auth-tokens via-file > > client-cert-not-required

[Openvpn-devel] RFC: Yubikey authentication for OpenVPN.

2017-06-14 Thread Steven Haigh
Hi all, No further comments or requests on the openvpn-users lists. Reposting here for further criticism / comments :) I did have one thought though, do I need to put any kind of banner at the top of the script as a 'maintainer' or such? I have attached this script for comment to be considered