OPENWRT Where is openvpn-auth-pam-so?
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
Please visit (and READ) the OpenVPN HowTo http://openvpn.net/howto prior to asking any questions in here!
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Jan 05, 2015 6:48 pm
OPENWRT Where is openvpn-auth-pam-so?
Hi everybody:
I have installed openvpn-openssl y openvpn-easy-rsa in my router with OPENWRT.
The VPN connection runs ok but I want authenticate users with system users.
I have inserted in the client configuration "auth-user-pass" and it runs ok, it asks me for an user/password.
But in the server configuration I have to insert a line like this: plugin /usr/lib/openvpn/openvpn-auth-pam.so /etc/pam.d/login.
Well I'm not bi able to know where "openvpn-auth-pam.so" is, I have look up it in the router and not it is.
I have to install something else or this is not the correct system to get the authentication that I want?
Could you help me?
Thanks!
Greetings!
I have installed openvpn-openssl y openvpn-easy-rsa in my router with OPENWRT.
The VPN connection runs ok but I want authenticate users with system users.
I have inserted in the client configuration "auth-user-pass" and it runs ok, it asks me for an user/password.
But in the server configuration I have to insert a line like this: plugin /usr/lib/openvpn/openvpn-auth-pam.so /etc/pam.d/login.
Well I'm not bi able to know where "openvpn-auth-pam.so" is, I have look up it in the router and not it is.
I have to install something else or this is not the correct system to get the authentication that I want?
Could you help me?
Thanks!
Greetings!
- Traffic
- OpenVPN Protagonist
- Posts: 4066
- Joined: Sat Aug 09, 2014 11:24 am
Re: Where is openvpn-auth-pam-so?
Code: Select all
plugin /usr/lib/openvpn/openvpn-auth-pam.so
Code: Select all
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
https://forum.openwrt.org/viewtopic.php?id=2869
-
- OpenVPN User
- Posts: 28
- Joined: Tue Mar 04, 2014 12:38 am
Re: Where is openvpn-auth-pam-so?
Been trying to do the same thing tonight. Got OpenVPN working with PAM and Google Auth on my Raspberry Pi, so wanted to do the same on OpenWRT.Traffic wrote:Is it in:Code: Select all
plugin /usr/lib/openvpn/openvpn-auth-pam.so
Code: Select all
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so
https://forum.openwrt.org/viewtopic.php?id=2869
It looks like there isn't a ready-made PAM plugin for OpenVPN for the latest OpenWRT, which will scupper any attempts to use OpenVPN with Google Authenticator on OpenWRT. At least, I can't see an OpenVPN PAM plugin in the make menu for OpenWRT (Chaos Calmer).
I've never attempted to cross-compile from source, but when I get some spare time I may give it a go. Who knows? I might get lucky and somehow make it work.
-
- OpenVPN User
- Posts: 28
- Joined: Tue Mar 04, 2014 12:38 am
Re: Where is openvpn-auth-pam-so?
Confirmed: https://dev.openwrt.org/ticket/18610 says I need to do it myself if I want it done.
- Traffic
- OpenVPN Protagonist
- Posts: 4066
- Joined: Sat Aug 09, 2014 11:24 am
Re: OPENWRT Where is openvpn-auth-pam-so?
Technically, that link says:
Compiling the openvpn source is relatively easy .. but compiling it for openwrt may not beit's not supported. if you want to change that, feel free to submit a patch
-
- OpenVPN User
- Posts: 33
- Joined: Sat Feb 09, 2013 9:10 pm
Re: OPENWRT Where is openvpn-auth-pam-so?
Another way to do is to use the "auth-user-pass-verify" directive in the OpenVPN config file in OpenWRT, and point it to a verification script, which in turn accesses a file where you've stored the usernames and passwords (or usernames and hashes, perhaps).
I haven't see that script around for OpenWRT, however, just DD-WRT.
I haven't see that script around for OpenWRT, however, just DD-WRT.
-
- OpenVPN User
- Posts: 33
- Joined: Sat Feb 09, 2013 9:10 pm
Re: OPENWRT Where is openvpn-auth-pam-so?
Found one which works:
https://github.com/troydm/ovpnauth.sh
https://github.com/troydm/ovpnauth.sh