dedal.qq Hi everybody. I want to do verifying clients. Some of my clients can have configured 2FA. 2FA on my server is optional. I want get only username and password from my incoming client on first time and verify it. If this user has 2FA must send request to client: "Please. Enter additional code for 2FA" If i will use option static-challenge on openvpn client then all user must enter addition 2FA code. It a bad because they can have not it. I think i can send request to client via management interface of server or via C plugin. But i not found about it in doc. I know about existence "Dynamic challenge/response protocol". What is it? And maybe i can use it? thanks.
TinCanTech Start here: https://community.openvpn.net/openvpn/wiki/HOWTO#Howtoadddual-factorauthenticationtoanOpenVPNconfigurationusingclient-sidesmartcards
dedal.qq TinCanTech wrote Start here: https://community.openvpn.net/openvpn/wiki/HOWTO#Howtoadddual-factorauthenticationtoanOpenVPNconfigurationusingclient-sidesmartcards I found it but it not help me. I just want get second factor from my client via OpenVPN means (protocols and transport). All business-logic is done.
