|
From: Charles D. <cd...@sp...> - 2006-10-16 14:05:21
|
Ben Low wrote: > This describes a mechanism for integrating OpenVPN client assignments > into a local (server) DNS, such that you can reference VPN clients by > name. e.g. 'common-name.vpn.example.net', where common-name is the > VPN client's authenticated username (typically the certificate's > Common Name). > > The learn-address.sh script below maintains a separate /etc/hosts- > style file, adding and removing (commenting out) IP - name records as > openvpn clients connect and disconnect. Using this with the dnsmasq > DNS server's support for an 'additional hosts' file gives the desired > result. Interesting -- that's considerably less code than the mechanism I've previously posted for doing the same thing using nsupdate to provide data to bind. http://openvpn.net/archive/openvpn-users/2005-08/msg00146.html |