In the following post I will describe how to configure your existing OpenVPN server to support OTP MFA along with LDAP authentication. I already had a working OpenVPN + Radius authentication with Active Directory on a Debian Server, but in order to add OTP as MFA, I had to switch to LDAP authentication. Packages installed: sudo apt install libpam-ldapd oathtool libpam-oath qrencode pamtester After installing libpam-ldapd , you are asked to Configure nslcd and nssswitch . You may enter some default config and edit this later. The most importand config file is /etc/nslcd.conf , and after each edit remember to restart nslcd service! sudo service nslcd restart /etc/nslcd.conf uri ldap://ldap.local # The search base that will be used for all queries. base dc=domain,dc=com binddn cn=user,ou=hosted,dc=domain,dc=com bindpw pass tls_reqcert never tls_cacertfile /etc/ssl/certs/ca-certificates.crt # Mappings for Active Directory pagesize 1000 referrals off idle_timelimit 800 filter passwd ...
Σχόλια
Δημοσίευση σχολίου