johannesm
Hi,
We'd like to setup an OpenVPN configuration, where there are both dial in clients and a site to site tunnel to our branch at another location.
Previously, we where using client certificates with ipcop. For better manageability, we'd like to switch to RADIUS authentication for the dial in users. However I'm not happy with creating an LDAP account for our branch. Furthermore my redhat 5.1 based enpoint at the branch does not allow saving the credentials in a auth-user-pass file unfortunately.
Instead I'd like authentication to be successful if the client provides either username and password authenticated by the radius-server or a client certificate.
Is there an easy way to achieve this? Of course I could use two OpenVPN services, however this will create two subnets and require me to have additional firewall rules and so on...
Regards,
Johannes
