Official plugin for Freeradius + OpenVPN?

[Adrian Tschira]

Hey Houman,

We're doing this using the openvpn-plugin-pam.so that ships with openvpn 
and libpam-radius. In our ovpn conf:

     plugin path-to/openvpn-plugin-auth-pam.so ovpn-0

where ovpn-0 is declared in /etc/pam.d/ovpn-0:

     account sufficient      pam_permit.so
     auth    required        pam_radius_auth.so conf=/path/to/conf

Be aware that libpam-radius has not had a release since 2016 despite 
numerous fixes, so you will probably want to compile it from source.

On 19/07/2020 21:18, Houman wrote:
> Hello,
>
> I have been using Freeradius and Strongswan (eap-radius) for a few years
> now and for the first time I'm trying to achieve the same thing with
> OpenVPN instead.
>
> Based on my research it seems that the recommended plugin is a decade old.
>
> http://www.nongnu.org/radiusplugin/
>
> It's hard to imagine that this wasn't updated for so long. Am I missing
> something? Is there any official Freeradius plugin for OpenVPN?
>
> I found this tutorial to be very promising
> https://www.vpsserver.com/community/tutorials/17/authenticate-openvpn-clients-thru-the-freeradius-server/
> but I thought I ask here first if someone has experience with this topic,
> and I'm on the right path.
>
> Many Thanks,
> Houman
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html