Good day all,
I need some assistance. I just installed OpenVPN on debian box and everything seems to be going smoothly. I pointed it to my RADIUS Server(Server 2k8 R2, Chap2 and Chap). However upon trying to login to the client web ui I get RADIUS access denied. I noticed there was no server.conf in place, and just pulled the default one, however I assume I need to customize it.
My question is, what do I need in it? I do not want o have to deal with certificates just authenticate through RADIUS. Also I chose to do Ethernet Bridging so openvpn will let the DHCP server assign available IP's.
Below is config from the website i got extracted, anything would be much appreciated.
{
"Default": {
"admin_ui.https.ip_address": "all",
"admin_ui.https.port": "943",
"aui.eula_version": "1",
"auth.ldap.0.name": "My LDAP servers",
"auth.ldap.0.ssl_verify": "never",
"auth.ldap.0.timeout": "4",
"auth.ldap.0.use_ssl": "never",
"auth.module.type": "radius",
"auth.pam.0.service": "openvpnas",
"auth.radius.0.acct_enable": "true",
"auth.radius.0.auth_method": "chap",
"auth.radius.0.name": "My Radius servers",
"auth.radius.0.server.0.acct_port": "1646",
"auth.radius.0.server.0.auth_port": "1645",
"auth.radius.0.server.0.host": "10.50.50.2",
"auth.radius.0.server.0.secret": "***",
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "all",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
"cs.ssl_method": "SSLv23",
"host.name": "*****",
"sa.initial_run_groups.0": "web_group",
"sa.initial_run_groups.1": "openvpn_group",
"vpn.client.routing.inter_client": "false",
"vpn.client.routing.reroute_dns": "true",
"vpn.client.routing.reroute_gw": "true",
"vpn.daemon.0.client.netmask_bits": "20",
"vpn.daemon.0.client.network": "5.5.0.0",
"vpn.daemon.0.listen.ip_address": "all",
"vpn.daemon.0.listen.port": "443",
"vpn.daemon.0.listen.protocol": "tcp",
"vpn.daemon.0.server.ip_address": "eth0",
"vpn.general.osi_layer": "2",
"vpn.server.daemon.enable": "true",
"vpn.server.daemon.tcp.n_daemons": "1",
"vpn.server.daemon.tcp.port": "443",
"vpn.server.daemon.udp.n_daemons": "1",
"vpn.server.daemon.udp.port": "1194",
"vpn.server.foreign_bridge": "",
"vpn.server.group_pool.0": "5.5.16.0/20",
"vpn.server.port_share.enable": "true",
"vpn.server.port_share.ip_address": "1.2.3.4",
"host.name": "208.111.12.237",
"sa.initial_run_groups.0": "web_group",
"sa.initial_run_groups.1": "openvpn_group",
"vpn.client.routing.inter_client": "false",
"vpn.client.routing.reroute_dns": "true",
"vpn.client.routing.reroute_gw": "true",
"vpn.daemon.0.client.netmask_bits": "20",
"vpn.daemon.0.client.network": "5.5.0.0",
"vpn.daemon.0.listen.ip_address": "all",
"vpn.daemon.0.listen.port": "443",
"vpn.daemon.0.listen.protocol": "tcp",
"vpn.daemon.0.server.ip_address": "eth0",
"vpn.general.osi_layer": "2",
"vpn.server.daemon.enable": "true",
"vpn.server.daemon.tcp.n_daemons": "1",
"vpn.server.daemon.tcp.port": "443",
"vpn.server.daemon.udp.n_daemons": "1",
"vpn.server.daemon.udp.port": "1194",
"vpn.server.foreign_bridge": "",
"vpn.server.group_pool.0": "5.5.16.0/20",
"vpn.server.port_share.enable": "true",
"vpn.server.port_share.ip_address": "1.2.3.4",
"vpn.server.port_share.port": "1234",
"vpn.server.port_share.service": "admin+client",
"vpn.server.routing.private_access": "nat",
"vpn.server.routing.private_network.0": "10.50.50.0/24",
"vpn.tls_refresh.do_reauth": "true",
"vpn.tls_refresh.interval": "360"
