On 05/07/2021 18:39, Gert Doering wrote:
Hi,
On Mon, Jul 05, 2021 at 11:56:01AM -0400, David Mehler wrote:
Thank you for your reply. I do not have a plugin-auth-pam I've run a
find for it.Where would this be at, this would be perfect, espeecially
if I'm understanding your response right each cl
This does kind of depend on how one defines "2FA". If you define the
"two factors" as a certificate and a password, then just
auth-user-pass and set up the PAM plugin.
If you want MFA, where the factors are a certificate, password, *and*
OTP, then you'll need to do what you're talking about with
Hi,
On Mon, Jul 05, 2021 at 11:56:01AM -0400, David Mehler wrote:
> Thank you for your reply. I do not have a plugin-auth-pam I've run a
> find for it.Where would this be at, this would be perfect, espeecially
> if I'm understanding your response right each client certificate would
> then be bound
Hi
On Mon, Jul 5, 2021 at 11:58 AM David Mehler wrote:
> Hello,
>
> Thank you for your reply. I do not have a plugin-auth-pam I've run a
> find for it.Where would this be at, this would be perfect, espeecially
> if I'm understanding your response right each client certificate would
> then be bou
Hello,
Thank you for your reply. I do not have a plugin-auth-pam I've run a
find for it.Where would this be at, this would be perfect, espeecially
if I'm understanding your response right each client certificate would
then be bound to a specific username and password which would have to
be validat
Hi,
On Sun, Jul 04, 2021 at 05:13:54PM -0400, David Mehler wrote:
> Is it possible to get OpenVPN to prompt for user login credentials
> when they atempt to login? Server and keys are good, and i'd now like
> to get 2fa going.
add --auth-user-pass to your client config, and a password validation
