Page 1 of 1

Obtain user attributes from Radius server

Posted: Mon Jan 11, 2010 9:49 am
by fulat2k
Hi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.

Re: Obtain user attributes from Radius server

Posted: Wed Jan 27, 2010 10:29 am
by krzee
fulat2k wrote:Hi folks,

I've configured openvpn to use freeradius+mysql to authenticate users. Using
the same setup, is it possible to assign IP or other attributes from the radius
server to openvpn?

I've read the FreeRADIUS attributes from
http://freeradius.org/rfc/attributes.html; but I don't see any documentation on
OpenVPN to pull/push those attributes upon connection.

Any help is greatly appreciated.

Thanks.
You want to make a custom script, read the openvpn manual at http://openvpn.net/man-beta and search for --client-connect

Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN

Re: Obtain user attributes from Radius server

Posted: Wed Jan 27, 2010 4:42 pm
by Douglas
krzee wrote: Your setup would make a cool post in the bragging rights section or the openvpn wiki at https://www.secure-computing.net/wiki/index.php/OpenVPN
Both! :D

Re: Obtain user attributes from Radius server

Posted: Thu Mar 25, 2010 6:34 pm
by krzee
now that i have looked in to this better, i was mistaken. They way to accomplish this is the auth pam script... then pam gets the radius settings for openvpn
hope that helps