client-cert or username/password authentication

brandtwein

Hello,

Is it possible to configure OpenVPN so that users can authenticate by either supplying a valid client-certificate OR by supplying username/password credentials that will be passed on to an external script for validation?

The HOWTO only mentions that by default OpenVPN requires both client-cert AND username/password authentication to succeed in order for clients to be authenticated.

Thanks

Traffic

brandtwein wroteThe HOWTO only mentions that by default OpenVPN requires both client-cert AND username/password

Where does it say that .. please quote it.

The recommended way to authenticate is with a full PKI - ie: via certs not username/password.

I do not think it is possible to have one server configured to allow some users authenticate via certs and some others via username/password. For that you would need two server configs .. each setup as required.