This config will help admins to auth openvpn from local linux system users. compile auth-pam from openvpn source cd /root/openvpn-2.1.3/plugin/auth-pam make cp openvpn-auth-pam.so /etc/openvpn/ apped following in server.conf plugin /etc/openvpn/openvpn-auth-pam.so /etc/pam.d/login This is all needs to be done at server end. at client end append following line in client.conf auth-user-pass you can create users without [...]
Full Story »OpenVpn Server with Virtual Users
This may come for handy for a admins who prefers openvpn with virtual users, rather having users auth from ldap / pop. compile auth-pam from openvpn source cd /root/openvpn-2.1.3/plugin/auth-pam make cp openvpn-auth-pam.so /etc/openvpn/ download & install pam-pam_pwd pam for virtual user. cat /etc/pam.d/vuser auth required pam_pwdfile.so pwdfile /etc/openvpn/users account required pam_permit.so Append following in server.conf [...]
Full Story »OpenVpn Server with Imap Auth
Openvpn can also be configured to auth from imap server. compile auth-pam from openvpn source cd /root/openvpn-2.1.3/plugin/auth-pam make cp openvpn-auth-pam.so /etc/openvpn/ download pam-imap append following in server.conf plugin /etc/openvpn/openvpn-auth-pam.so “imap-auth” Configure pam_imap to communicate with imap server. cat /etc/pam.d/pam_imap.conf PAM_Server0 = imap.linuxreaders.com:143 #PAM_Domain = linuxreaders.com This is all needs to be done at server end. [...]
Full Story »OpenVpn Server with pop3 Auth
Most organizations would prefer centralized auth. When a person resigned his / her email id is deactivated on priority bases, same can be done with openvpn. If same user is being authenticated from existing mail server, it will same time for sys admins to remove access from different places. compile auth-pam from openvpn source cd [...]
Full Story »