We use LinOTP for 2FA auth with OpenVPN and it's really a good solution. Tweaked it a bit for a dual-everything scheme and now we have a near perfect solution.
Le ven. 18 janv. 2019 à 16:53, Gert Doering <[email protected]> a écrit : > Hi, > > On Fri, Jan 18, 2019 at 05:11:28PM +0300, Erik van Dam via Openvpn-users > wrote: > > The initial setup works good, but after +/- 15 minutes the connection > wants to re-authenticate. Which i don't want. It goes a bit like this: > > re-authentication with 2FA is somewhat annoying ("it does not work"). > > Approach 1: increase reneg-timeout, which requires proper ciphers > (AES, not default = blowfish). > > Approach 2: work with auth tokens, but this is somewhat "work in progress" > on the openvpn side (you need to use fairly recent openvpn versions and > some sort of token-aware authenticaiton plugin). > > > openvpn 2.3.2-7ubuntu3.2 > > This is... old. > > gert > > -- > "If was one thing all people took for granted, was conviction that if you > feed honest figures into a computer, honest figures come out. Never > doubted > it myself till I met a computer with a sense of humor." > Robert A. Heinlein, The Moon is a Harsh > Mistress > > Gert Doering - Munich, Germany > [email protected] > _______________________________________________ > Openvpn-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openvpn-users >
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
