[Devil-Linux-discuss] VPN Service

[Frank W. <Fra...@ct...>]

Hi fellow DL-Users,

I'm wondering what you use on your devil-linux boxes to provide VPN
support (for road-warriors).
Up 'til now I have used pptpd with two different approaches for
authentication: 

*) flat password files (/etc/ppp/chap-secrets): this bears the advantage
that you can specify the client's IP address in the config, and you have
fine control over which client accesses what on the firewall. This
doesn't work well when the client wants two connections, however, and
passwords are static and stored cleartext.

*) winbind.so plugin and ntlm_auth: this doesn't let me specify clients'
IP addresses, but it handles multiple connections nicely, and users can
use their one-and-only beloved password that our Identity management
syncs all around the country.

What would you guys suggest if I have the following wishes:
*) authenticate against a remote system (preferably radius)
*) specific ip-address(ranges) for each user
*) allow multiple connections (not REALLY mandatory)

Thanks a lot for your input,

Frank

-- 
_______________________________________________
Centre de Technologie de l'Education
29 avenue John F. Kennedy
L-1855 Luxembourg-Kirchberg
email: Fra...@ct...
tél.: +352 247-85973
fax: +352 333797
_______________________________________________