Official plugin for Freeradius + OpenVPN?

[Houman]

Hello Adrian,

Thank you for your kind reply.

I'm struggling to find *openvpn-plugin-pam.so *and *libpam-radius *in the
OpenVPN source code.
The closest I could find was:

openvpn-2.4.9/src/plugins/auth-pam

Did you mean *openvpn-auth-pam* by any chance?

I can't find *libpam-radius* at all.

Do you know of any tutorial for this by any chance? I keep looking, maybe I
find something.

Many Thanks,
Houman


On Sun, 19 Jul 2020 at 20:37, Adrian Tschira <adrian.tschira at partner.kit.edu>
wrote:

> Hey Houman,
>
> We're doing this using the openvpn-plugin-pam.so that ships with openvpn
> and libpam-radius. In our ovpn conf:
>
>      plugin path-to/openvpn-plugin-auth-pam.so ovpn-0
>
> where ovpn-0 is declared in /etc/pam.d/ovpn-0:
>
>      account sufficient      pam_permit.so
>      auth    required        pam_radius_auth.so conf=/path/to/conf
>
> Be aware that libpam-radius has not had a release since 2016 despite
> numerous fixes, so you will probably want to compile it from source.
>
> On 19/07/2020 21:18, Houman wrote:
> > Hello,
> >
> > I have been using Freeradius and Strongswan (eap-radius) for a few years
> > now and for the first time I'm trying to achieve the same thing with
> > OpenVPN instead.
> >
> > Based on my research it seems that the recommended plugin is a decade
> old.
> >
> > http://www.nongnu.org/radiusplugin/
> >
> > It's hard to imagine that this wasn't updated for so long. Am I missing
> > something? Is there any official Freeradius plugin for OpenVPN?
> >
> > I found this tutorial to be very promising
> >
> https://www.vpsserver.com/community/tutorials/17/authenticate-openvpn-clients-thru-the-freeradius-server/
> > but I thought I ask here first if someone has experience with this topic,
> > and I'm on the right path.
> >
> > Many Thanks,
> > Houman
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html