Hi folks,
I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?
I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.
Any help is greatly appreciated.
Thanks.
Obtain user attributes from Radius server
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVpn Newbie
- Posts: 1
- Joined: Mon Jan 11, 2010 9:44 am
- krzee
- Forum Team
- Posts: 728
- Joined: Fri Aug 29, 2008 5:42 pm
Re: Obtain user attributes from Radius server
You want to make a custom script, read the openvpn manual at http://openvpn.net/man-beta and search for --client-connectfulat2k wrote:Hi folks,
I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?
I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.
Any help is greatly appreciated.
Thanks.
Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN
-
- Forum Team
- Posts: 285
- Joined: Wed Aug 27, 2008 2:41 am
Re: Obtain user attributes from Radius server
Both!krzee wrote: Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN

- krzee
- Forum Team
- Posts: 728
- Joined: Fri Aug 29, 2008 5:42 pm
Re: Obtain user attributes from Radius server
now that i have looked in to this better, i was mistaken. They way to accomplish this is the auth pam script... then pam gets the radius settings for openvpn
hope that helps
hope that helps