Hello-
I would like to establish a second factor authentication method when using PAM authentication with OpenVPN
Access Server 2.0.10. I assume that PAM by default works by using certificates? The documentation isn't particularly clear on how that works.
In any case, I tried to add password authentication by using this server directive from the official OpenVPN documentation:
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so login
It does not work as the plugin doesn't appear to exist:
could not load plugin shared object /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so: /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so: cannot open shared object file: No such file or directory
I then found this thread which describes exactly the same problem, but no working solution was posted before it was closed by a moderator:
https://forums.openvpn.net/topic16637.html
I tried this directive indicated in that thread as the OP's solution:
plugin /etc/openvpn/openvpn-plugin-auth-pam.so login
Still no luck. As with the directive provided by the official documentation, no plugin exists at that path:
could not load plugin shared object /etc/openvpn/openvpn-plugin-auth-pam.so: /etc/openvpn/openvpn-plugin-auth-pam.so: cannot open shared object file: No such file or directory
I'm hoping someone can point me in the right direction.