Hello Adrian, Thank you for your kind reply. I'm struggling to find *openvpn-plugin-pam.so *and *libpam-radius *in the OpenVPN source code. The closest I could find was: openvpn-2.4.9/src/plugins/auth-pam Did you mean *openvpn-auth-pam* by any chance? I can't find *libpam-radius* at all. Do you know of any tutorial for this by any chance? I keep looking, maybe I find something. Many Thanks, Houman On Sun, 19 Jul 2020 at 20:37, Adrian Tschira <adrian.tschira@partner.kit.edu> wrote:
Hey Houman,
We're doing this using the openvpn-plugin-pam.so that ships with openvpn and libpam-radius. In our ovpn conf:
plugin path-to/openvpn-plugin-auth-pam.so ovpn-0
where ovpn-0 is declared in /etc/pam.d/ovpn-0:
account sufficient pam_permit.so auth required pam_radius_auth.so conf=/path/to/conf
Be aware that libpam-radius has not had a release since 2016 despite numerous fixes, so you will probably want to compile it from source.
On 19/07/2020 21:18, Houman wrote:
Hello,
I have been using Freeradius and Strongswan (eap-radius) for a few years now and for the first time I'm trying to achieve the same thing with OpenVPN instead.
Based on my research it seems that the recommended plugin is a decade old.
http://www.nongnu.org/radiusplugin/
It's hard to imagine that this wasn't updated for so long. Am I missing something? Is there any official Freeradius plugin for OpenVPN?
I found this tutorial to be very promising
but I thought I ask here first if someone has experience with this topic, and I'm on the right path.
Many Thanks, Houman - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
https://www.vpsserver.com/community/tutorials/17/authenticate-openvpn-client... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html