Re: [Devil-Linux-discuss] Hardening Openvpn security

[Frank W. <Fra...@ct...>]

Hi, 
I use the following (on DL)

in openvpn's server conf:

...
auth-user-pass-verify /etc/openvpn/auth/auth.pl via-file
tmp-dir /var/tmp
username-as-common-name
client-connect /etc/openvpn/auth/connect-script.pl
client-disconnect /etc/openvpn/auth/disconnect-script.pl
...



in the auth.pl file:

....
# Get username/password from file

if ($ARG = shift @ARGV) {
    if (!open (UPFILE, "<$ARG")) {
        print "Could not open username/password file: $ARG\n";
        exit 1;
    }
} else {
    print "No username/password file specified on command line\n";
    exit 1;
}

$username = <UPFILE>;
$password = <UPFILE>;

...


>From here I do an LDAP verification... 


Hope this helps,

Frank

-- 
_______________________________________________
Centre de Technologie de l'Education
29 avenue John F. Kennedy
L-1855 Luxembourg-Kirchberg
email: Fra...@ct...
tél.: +352 247-85973
fax: +352 333797
_______________________________________________



On Tue, 2012-03-06 at 11:18 +0100, Paolo Spizzirri wrote:
> The director of my company is paranoid about VPN, so i decided to
> improve openvpn security adding username/password authentication.
> Is there some script in devil distro to check username and password ?
> At the moment i want to store username and password on file in devil
> linux machine; What type of format of data is required for the file ?
> Thanks for your cooperation,
> Paolo 
> -- 
> 
> Paolo Spizzirri
> 
> Software Developer
> 
> Mobile: +39 349 7784465
> Email: pao...@gm...
> 
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss