ilium007 Hi - I have looked around and can't find info on running multiple authentication plugins in OpenVPN. I am currently using a generic cert and LDAP auth and wanted to also add OTP (or Duo Security) to the mix. Is it possible to 'chain' together authentication plugins to achieve this ? The benefit of using Duo as a 2FA solution is that I can pass the password as 'push' and have the Duo client user click a button that says 'Approve'. Doing it this way allows me to take a user/pass form the client to satisfy the LDAP auth credentials and then pass the username (from LDAP auth) and the password 'push' top Duo Security to do the 2FA. I have modified the Duo plugin to do this (not pass the user entered password) but don't know if it is possible to use two auth plugins. Any help appreciated.
TinCanTech Multiple plugins are possible .. Try google/duckduckgo search with site:forums.openvpn.net search termsNo space between site:forums ..
TinCanTech Most people don't and it's not like you mentioned it before ..... Maybe the mailing list will be more useful for you.
ilium007 Can anyone else provide some actual help ? I'll do some more searching as per the previous helpful post when I get to work.
ilium007 So - I did some searching of the OpenVPN Forums via DDG and found nothing of interest apart from this thread: I found one thread that I though *may* be relevant but the OpenVPN forum link was broken: So I searched around using DDG - I can't find anything that is relevant to my situation: https://duckduckgo.com/?q=site%3Aforums.openvpn.net+multiple+auth+plugins&ia=web https://duckduckgo.com/?q=site%3Aforums.openvpn.net+multiple+authentication+plugins&ia=web Is there anything else I should do before asking here for some help ? I think we have wasted enough of this thread talking about searching for help, which I have done, now can we please talk about that actual problem I have ?
TinCanTech Classic .. I completely agree .. duckduckgo(yahoo) are not doing a very good job :lol: If you try google your cookies will expire and you will have to log in again :roll: What can I tell you .. they don't tell me sh*t .. I worked it out for myself :mrgreen: I gave you the right advice above.
ilium007 @TinCanTech - How about you just provide some help instead of being a tool. To anyone else - I am struggling here getting this to work, I have searched the net and haven't found answers that match my scenario as I have already pointed out. Google returns answers about PAM + LDAP authentication but I am not using PAM auth and do not intend to. I want to use multiple auth xxxx.so plugins, ie. a user is authenticated against LDAP and then the username is passed to Duo Security with a password of 'push' to then do the 2FA via the Duo Security app. @TinCanTech - if you can't provide any help stop replying.
ilium007 I have also found https://forums.openvpn.net/viewtopic.php?t=18403 but our LDAP server is internal and not publicly accessible from Duo Security hosts.
TinCanTech ilium007 wrote@TinCanTech - How about you just provide some help instead of being a tool.We are all tools .. even you ..pick a flavour and suck it down. You have been adequately advised.
TinCanTech TinCanTech wroteMaybe the mailing list will be more useful for youSwallow your pride man .. my advise is sound.
ilium007 FFS - there is no pride involved. I have &%^*^%$ searched and cant find anything. You are just trolling now right ?
jon albert ilium007 wroteHi - I have looked around and can't find info on running multiple authentication plugins in OpenVPN. I am currently using a generic cert and LDAP auth and wanted to also add OTP (or Duo Security) to the mix. Is it possible to 'chain' together authentication plugins to achieve this ? The benefit of using Duo as a 2FA solution is that I can pass the password as 'push' and have the Duo client user click a button that says 'Approve'. Doing it this way allows me to take a user/pass form the client to satisfy the LDAP auth credentials and then pass the username (from LDAP auth) and the password 'push' top Duo Security to do the 2FA. I have modified the Duo plugin to do this (not pass the user entered password) but don't know if it is possible to use two auth plugins. Any help appreciated. I don't swing that way!
