[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] [repost] Problem with per-User authentication methods


  • Subject: Re: [Openvpn-users] [repost] Problem with per-User authentication methods
  • From: James Yonan <jim@xxxxxxxxx>
  • Date: Thu, 13 Oct 2005 10:08:23 -0600 (MDT)

On Thu, 13 Oct 2005, Ralf Hildebrandt wrote:

> * Ralf Hildebrandt <Ralf.Hildebrandt@xxxxxxxxxx>:
> > * James Yonan <jim@xxxxxxxxx>:
> > 
> > > > Indeed, that's what I observed. So, is there a way of deploying
> > > > different authentication methods for different users?
> > > 
> > > Not unless the plugin directly supports this.
> > 
> > Ugh. No :(
> > Is there a way to do this with PAM somehow (without coding)?
> 
> I was able to chain PAM modules, but this has the disadvantage that
> ANY PAM module returning OK would allow the user to get in.

No, that's not true -- if plugins are chained, then all plugins must 
succeed in order for the user to be authenticated.

See the plugin_call function in plugin.c

James

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users