jerry
With the push for TFA in the web community I have been tasked to get this working. In the client settings on the OpenVPN-AS server there is an option called
Configure Google Authenticator support
Google Authenticator is a time-based one-time password authentication system. When enabled, users will be required to provide one-time passwords in addition to other login credentials when connecting to the VPN. Users will need to run the Google Authenticator app on their mobile phone, and key it by scanning a QR code from the Client Web Server.
Require that users provide a Google Authenticator one-time password for every VPN login
By selecting the check box it initiates this process.
How does the GA app on a phone translate to allowing a user to access OpenVPN? How does it verify the laptop/desktop if all it does is acknowledge that the user is logged on to the Google account? I can login to the laptop without logging into my Google account and then start the OpenVPN Gui. How does the OpenVPN server verify that?
thanks
