Hi, I have a password in addition to a google authenticator otp, and I would like to change the (client?) configuration file so that I could use a file to store the user-name and password, so that I would only have to put the otp whenever I want to connect to openvpn. I tried creating a txt file with two lines of use-name and password, and pass its path as an argument of the "auth-user-pass" flag, but I'm keep getting "auth-failure:" error messages. Lines in "client.ovpn" file: [quote] auth-user-pass "/path/to/../login.conf" static-challenge "Enter Google Authenticator Code" 1 auth-nocache [/quote] File "login.conf": [quote] [/quote] Notes: 1. I tried to change to dynamic challenge as it seems to separate the username+password authentication from the google authenticator, but it also didn't work (I only changed to dynamic-challenge in the client config file, not the server file). 2. I use the OpenVPN Connect MAC OS X (2.5.0.136) app. Thank you! Adva

Using 2FA together with auth-user-pass

advaza

Hi,
I have a password in addition to a google authenticator otp, and I would like to change the (client?) configuration file so that I could use a file to store the user-name and password, so that I would only have to put the otp whenever I want to connect to openvpn. I tried creating a txt file with two lines of use-name and password, and pass its path as an argument of the "auth-user-pass" flag, but I'm keep getting "auth-failure:" error messages.

Lines in "client.ovpn" file:

auth-user-pass "/path/to/../login.conf"
static-challenge "Enter Google Authenticator Code" 1
auth-nocache

File "login.conf":

<user-name>
<password>

Notes:
1. I tried to change to dynamic challenge as it seems to separate the username+password authentication from the google authenticator, but it also didn't work (I only changed to dynamic-challenge in the client config file, not the server file).
2. I use the OpenVPN Connect MAC OS X (2.5.0.136) app.

Thank you!
Adva