copper21
Hello all,
I have researched this subject, but I am not finding the answer; at least an answer that I understand. Any help would be appreciated.
Right now my setup includes a windows 2008 domain, OpenVPN, and client machines, I have OpenVPN working great to where users can login to OpenVPN using their network credentials using LDAP.
The users log into a Windows XP/7 domain laptop for example using their username/password, and then open up OpenVPN client, and log in using the same username and password as in the active directory; like I said that works great, but the connection to the home network is done after login. Obviously this setup uses cached credentials when not on the home network to login.
What I would like to setup is for the user to enter their username and password at login, into Windows, and at the same time pass that username and password onto OpenVPN to then to login to the network. Ultimately this would hopefully connect to the network making mapped drives appear and the login process only having to be done once.
It should also be mentioned that I dont want to setup an auto connect profile.
Thanks in advance!
Brian
janjust
with the current version of OpenVPN (and the GUI) this cannot be done. There is no way to extract the login credentials (especially the password!) from the login program/session.
An entirely new plugin would have to be written (unless 'eurephia' can do this) which negotiates via NTLM between client and server. I think this is possible but it's certainly not trivial.
copper21
Jan,
Thanks for the response, that is what I was figuring since I could not find anything anywhere on the topic.
Brian
Mimiko
It's not possible at all. As janjust said - there no means to grab username and password from login window. This will be a security breach. There can be used keyboard loggers that run as system services, that will detect keyboard input and windows login, and run openvpn with grabed data.
But even this. OpenVPN is started under user profile, wich is not loaded yet. To load user profile, openvpn must be running. But it will not run because user profile is not loaded. It's a dead end.
You can run openvpn us system service, that will make a VPN connection on windows startup. But you will lose password authentication.
