Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-06 Thread David Sommerseth
On 05/07/2021 18:39, Gert Doering wrote: Hi, On Mon, Jul 05, 2021 at 11:56:01AM -0400, David Mehler wrote: Thank you for your reply. I do not have a plugin-auth-pam I've run a find for it.Where would this be at, this would be perfect, espeecially if I'm understanding your response right each cl

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Joe Patterson
This does kind of depend on how one defines "2FA". If you define the "two factors" as a certificate and a password, then just auth-user-pass and set up the PAM plugin. If you want MFA, where the factors are a certificate, password, *and* OTP, then you'll need to do what you're talking about with

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Gert Doering
Hi, On Mon, Jul 05, 2021 at 11:56:01AM -0400, David Mehler wrote: > Thank you for your reply. I do not have a plugin-auth-pam I've run a > find for it.Where would this be at, this would be perfect, espeecially > if I'm understanding your response right each client certificate would > then be bound

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Selva Nair
Hi On Mon, Jul 5, 2021 at 11:58 AM David Mehler wrote: > Hello, > > Thank you for your reply. I do not have a plugin-auth-pam I've run a > find for it.Where would this be at, this would be perfect, espeecially > if I'm understanding your response right each client certificate would > then be bou

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread David Mehler
Hello, Thank you for your reply. I do not have a plugin-auth-pam I've run a find for it.Where would this be at, this would be perfect, espeecially if I'm understanding your response right each client certificate would then be bound to a specific username and password which would have to be validat

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-04 Thread Gert Doering
Hi, On Sun, Jul 04, 2021 at 05:13:54PM -0400, David Mehler wrote: > Is it possible to get OpenVPN to prompt for user login credentials > when they atempt to login? Server and keys are good, and i'd now like > to get 2fa going. add --auth-user-pass to your client config, and a password validation

[Openvpn-users] OpenVPN 2fa user authentication

2021-07-04 Thread David Mehler
Hello, Is it possible to get OpenVPN to prompt for user login credentials when they atempt to login? Server and keys are good, and i'd now like to get 2fa going. Thanks. Dave. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://