OPENWRT Where is openvpn-auth-pam-so?

This forum is for all inquiries relating to the installation of OpenVPN from source and with binaries.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Post Reply
pacofe
OpenVpn Newbie
Posts: 1
Joined: Mon Jan 05, 2015 6:48 pm

OPENWRT Where is openvpn-auth-pam-so?

Post by pacofe » Mon Jan 05, 2015 7:15 pm

Hi everybody:

I have installed openvpn-openssl y openvpn-easy-rsa in my router with OPENWRT.

The VPN connection runs ok but I want authenticate users with system users.

I have inserted in the client configuration "auth-user-pass" and it runs ok, it asks me for an user/password.

But in the server configuration I have to insert a line like this: plugin /usr/lib/openvpn/openvpn-auth-pam.so /etc/pam.d/login.

Well I'm not bi able to know where "openvpn-auth-pam.so" is, I have look up it in the router and not it is.

I have to install something else or this is not the correct system to get the authentication that I want?

Could you help me?

Thanks!

Greetings!

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Where is openvpn-auth-pam-so?

Post by Traffic » Wed Jan 07, 2015 4:07 pm

Code: Select all

plugin /usr/lib/openvpn/openvpn-auth-pam.so
Is it in:

Code: Select all

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
:?:

https://forum.openwrt.org/viewtopic.php?id=2869

Alex Morris
OpenVPN User
Posts: 28
Joined: Tue Mar 04, 2014 12:38 am

Re: Where is openvpn-auth-pam-so?

Post by Alex Morris » Mon Mar 21, 2016 9:27 pm

Traffic wrote:

Code: Select all

plugin /usr/lib/openvpn/openvpn-auth-pam.so
Is it in:

Code: Select all

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
:?:

https://forum.openwrt.org/viewtopic.php?id=2869
Been trying to do the same thing tonight. Got OpenVPN working with PAM and Google Auth on my Raspberry Pi, so wanted to do the same on OpenWRT.

It looks like there isn't a ready-made PAM plugin for OpenVPN for the latest OpenWRT, which will scupper any attempts to use OpenVPN with Google Authenticator on OpenWRT. At least, I can't see an OpenVPN PAM plugin in the make menu for OpenWRT (Chaos Calmer).

I've never attempted to cross-compile from source, but when I get some spare time I may give it a go. Who knows? I might get lucky and somehow make it work.

Alex Morris
OpenVPN User
Posts: 28
Joined: Tue Mar 04, 2014 12:38 am

Re: Where is openvpn-auth-pam-so?

Post by Alex Morris » Tue Mar 22, 2016 1:15 pm

Confirmed: https://dev.openwrt.org/ticket/18610 says I need to do it myself if I want it done.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: OPENWRT Where is openvpn-auth-pam-so?

Post by Traffic » Tue Mar 22, 2016 2:39 pm

Technically, that link says:
it's not supported. if you want to change that, feel free to submit a patch
Compiling the openvpn source is relatively easy .. but compiling it for openwrt may not be :shock:

rseiler
OpenVPN User
Posts: 33
Joined: Sat Feb 09, 2013 9:10 pm

Re: OPENWRT Where is openvpn-auth-pam-so?

Post by rseiler » Sat Aug 20, 2016 9:37 pm

Another way to do is to use the "auth-user-pass-verify" directive in the OpenVPN config file in OpenWRT, and point it to a verification script, which in turn accesses a file where you've stored the usernames and passwords (or usernames and hashes, perhaps).

I haven't see that script around for OpenWRT, however, just DD-WRT.

rseiler
OpenVPN User
Posts: 33
Joined: Sat Feb 09, 2013 9:10 pm

Re: OPENWRT Where is openvpn-auth-pam-so?

Post by rseiler » Sun Aug 21, 2016 12:23 am


Post Reply