dynamic challenge/response in the community edition ?

alexxtasi

hi all!!
I am interested in setting up my openvpn server with a somekind challenge request of an otp. The thought is that the user would be prompt for username/password and after sending the otp via sms to he/she.... will be prompt for the otp.

Reading this http://openvpn.net/index.php/open-source/documentation/miscellaneous/79-management-interface.html I see there is a way, but I got confused about whether this feature is available in the community edition...

can anyone help with this please?
also a more specific tutorial would be appreciated

thank you

alexxtasi

I haven't yet find out anything... just that there is some challenge/response when there is a user or client certificate in the client configuration. This works well with the appropriate directives.

1- But how can I configure challenge/response when using an otp service-module, configured to work with openvpn via pam?
2- Is there a special directive?
3- Or the only solution in configuring 2-factor-authentication is the user to provide "password+otp" in the openvpn-client (which works great for me at the time) ?

After all... is the dynamic challenge/response feature available in OpenVPN community edition?

thank you