onetech-it
We are running OpenVPN with Tunnelblick clients, on OSX 10.10.
Normally the process is that we generate the OpenVPN user's conf file (including login name and password) via the server, the end user received the zipped config file (along with the private and public certs from the server) and once the user clicks the .conf file, it automatically populates in TunnelBlick, then they simply launch that VPN profile and it authenticates using the username/password combination that was created server side. The back end LDAP server uses private/public keys for each user to authenticate.
However, I have one user who is getting prompted to enter a 'passphrase' after entering his VPN credentials. Is this because the public key that he issues a passphrase to the key pair that he generated on his workstation before sending the key to the LDAP administrator to apply to his LDAP account?
