MFA for openvpn admin user when using LDAP & DUO?

[deleted]

Is there a way to enable MFA for the openvpn admin user when using DUO for users via LDAP & AD. The openvpn admin account is local. Thank you.

openvpn_inc

Hello stech4114,

Yes. Same way as all the other users. If you use an Access Server version 2.10 or higher. And remove the openvpn account from as.conf and make it a 'normal' account instead of a bootstrap account in as.conf.

Kind regards,
Johan

[deleted]

openvpn_inc wrote Hello stech4114,

Yes. Same way as all the other users. If you use an Access Server version 2.10 or higher. And remove the openvpn account from as.conf and make it a 'normal' account instead of a bootstrap account in as.conf.

Kind regards,
Johan

Can you elaborate on this please?

openvpn_inc

Hey stech4114,

There's a lot of information to convey, so probably better if you read the documentation section here titled "Secure the openvpn administrative user account" first:
https://openvpn.net/vpn-server-resources/recommendations-to-improve-security-after-installation/#secure-the-openvpn-administrative-user-account

You should be able to find all you need there. If not let me know which part you need clarification on.

Kind regards,
Johan