Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Joe Patterson
This does kind of depend on how one defines "2FA". If you define the "two factors" as a certificate and a password, then just auth-user-pass and set up the PAM plugin. If you want MFA, where the factors are a certificate, password, *and* OTP, then you'll need to do what you're talking about with

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Gert Doering
Hi, On Mon, Jul 05, 2021 at 11:56:01AM -0400, David Mehler wrote: > Thank you for your reply. I do not have a plugin-auth-pam I've run a > find for it.Where would this be at, this would be perfect, espeecially > if I'm understanding your response right each client certificate would > then be bound

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread Selva Nair
Hi On Mon, Jul 5, 2021 at 11:58 AM David Mehler wrote: > Hello, > > Thank you for your reply. I do not have a plugin-auth-pam I've run a > find for it.Where would this be at, this would be perfect, espeecially > if I'm understanding your response right each client certificate would > then be bou

Re: [Openvpn-users] OpenVPN 2fa user authentication

2021-07-05 Thread David Mehler
Hello, Thank you for your reply. I do not have a plugin-auth-pam I've run a find for it.Where would this be at, this would be perfect, espeecially if I'm understanding your response right each client certificate would then be bound to a specific username and password which would have to be validat

Re: [Openvpn-users] OpenVPN freezes few seconds after each connection

2021-07-05 Thread Jan Just Keijser
Hi, On 04/07/21 20:43, Thibault JY Derrien wrote: Dear OpenVPN community, I'm writing as I obtain a systematic freeze on a production machine today. Problem is that is gets frozen systematically few seconds after connection. It is not the first time and seem to be random. This is preventing

Re: [Openvpn-users] OpenVPN freezes few seconds after each connection

2021-07-05 Thread Hans via Openvpn-users
Hi Thibault, There might be countless reasons for that you described. Personally, I met with them twice. One irregular returning, was caused by an unstable DNS-server, causing random delays. The other was caused by the single-thread auth architecture of openvpn, where the connection set-up by