It is possible to mix ldap and MFA with google authenticator in Community Edition?

wagnergt12

Hello guys

I'm trying to extend the security of my VPN including MFA with Google Authenticator.
Currently I run a Debian server that works fine with my LDAP environment, I want to know if is possible to achieve that with community edition,
I have done some researches about how to implement OpenVPN + LDAP + MFA, can somebody telme if is this possible and if so point me to the right direction?

BillAnderson

In the case of Google Authenticator, the TOTP are generated using a software (soft) In order for the token to be effective, it must not be able to be duplicated and the shared secret should be closely guarded. It is free to use (all applications are free to download), the TOTP LDAP Version: 3.
official site

nothing

Yes, that is possible.
You should install libpam-google-authenticator, freeradius, sssd, sssd-tools, libnss-sss, libpam-sss, realmd, adcli...
Then join your debian PC to AD (using "realm join..."), configure freeradius with pam authentication and use it as "external" authentication method in openvpn configuration.