Obtain user attributes from Radius server

fulat2k

Hi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.

krzee

fulat2k wroteHi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.

You want to make a custom script, read the openvpn manual at http://openvpn.net/man-beta and search for --client-connect

Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN

[deleted]

krzee wrote Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN

Both! 😃

krzee

now that i have looked in to this better, i was mistaken. They way to accomplish this is the auth pam script... then pam gets the radius settings for openvpn
hope that helps