Obtain user attributes from Radius server

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
fulat2k
OpenVpn Newbie
Posts: 1
Joined: Mon Jan 11, 2010 9:44 am

Obtain user attributes from Radius server

Post by fulat2k » Mon Jan 11, 2010 9:49 am

Hi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Obtain user attributes from Radius server

Post by krzee » Wed Jan 27, 2010 10:29 am

fulat2k wrote:Hi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.
You want to make a custom script, read the openvpn manual at http://openvpn.net/man-beta and search for --client-connect

Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN

Douglas
Forum Team
Posts: 285
Joined: Wed Aug 27, 2008 2:41 am

Re: Obtain user attributes from Radius server

Post by Douglas » Wed Jan 27, 2010 4:42 pm

krzee wrote: Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN
Both! :D

User avatar
krzee
Forum Team
Posts: 728
Joined: Fri Aug 29, 2008 5:42 pm

Re: Obtain user attributes from Radius server

Post by krzee » Thu Mar 25, 2010 6:34 pm

now that i have looked in to this better, i was mistaken. They way to accomplish this is the auth pam script... then pam gets the radius settings for openvpn
hope that helps

Post Reply