blocks|key|497534|text|用Debian。Centos+7将很快获得EOL。Centos+8%2B在repos中没有这个插件，但是您可以编译它(见答案的结尾)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|497535|安装RADIUS认证模块并编辑openvpn服务器配置|497536|apt+update
#+apt-cache+search+".*openvpn.*radius.*"
apt+install+openvpn-auth-radius
#+find+/+-name+"radiusplugin*"
cp+/usr/share/doc/openvpn-auth-radius/examples/radiusplugin.cnf+/etc/openvpn/radiusplugin.cnf
nano+/etc/openvpn/radiusplugin.cnf|code-block|syntax|javascript|497537|编辑/etc/openvpn/radiusplugin.cnf中的下一节。休息-休假。|497538|name=ip-of-your-radius
retry=10+#+change+if+needed
wait=600+#+change+if+needed
sharedsecret=paste-here-radius-secret|497539|服务器配置|497540|nano+/etc/openvpn/server.conf|497541|增加一行：|497542|#+For+auth+plugins.+Uncomment+if+needed
#+username-as-common-name
+
#+RADIUS+Auth
plugin+/usr/lib/openvpn/radiusplugin.so+/etc/openvpn/radiusplugin.cnf|497543|如果您想编译它(我没有测试)：|497544|apt-get+install+libgcrypt11+libgcrypt11-dev+gcc+make+build-essential
wget+http://www.nongnu.org/radiusplugin/radiusplugin_v2.1a_beta1.tar.gz
tar+xvfz+radiusplugin_v2.1a_beta1.tar.gz
cd+radiusplugin_v2.1a_beta1/
make
cp+radiusplugin.so+/etc/openvpn/
cp+radiusplugin.cnf+/etc/openvpn/|497545|OpenVPN插件列表：https://community.openvpn.net/openvpn/wiki/PluginOverview|offset|length|497546|PS:+LDAP集成的类似算法(在repo中查找插件，使用示例配置，将其添加到主配置中)。|497547|entityMap|0|LINK|mutability|MUTABLE|url|https://community.openvpn.net/openvpn/wiki/PluginOverview^0|0|0|0|0|0|0|0|0|0|0|0|C|1L|0|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1D|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|1E|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|1F|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|1G|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|1H|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|1I|8|@]|9|@]|A|$G|H]]|$1|Q|3|R|5|6|7|1J|8|@]|9|@]|A|$]]|$1|S|3|T|5|F|7|1K|8|@]|9|@]|A|$G|H]]|$1|U|3|V|5|6|7|1L|8|@]|9|@]|A|$]]|$1|W|3|X|5|F|7|1M|8|@]|9|@]|A|$G|H]]|$1|Y|3|Z|5|6|7|1N|8|@]|9|@$10|1O|11|1P|1|1Q]]|A|$]]|$1|12|3|13|5|6|7|1R|8|@]|9|@]|A|$]]|$1|14|3|-4|5|6|7|1S|8|@]|9|@]|A|$]]]|15|$16|$5|17|18|19|A|$1A|1B]]]]

Use Debian. Centos 7 is getting EOL soon. Centos 8+ does not have this plugin in repos, but you can compile it (see end of answer).
Install RADIUS authentication module and edit openvpn server configuration
<pre><code>apt update
# apt-cache search &quot;.*openvpn.*radius.*&quot;
apt install openvpn-auth-radius
# find / -name &quot;radiusplugin*&quot;
cp /usr/share/doc/openvpn-auth-radius/examples/radiusplugin.cnf /etc/openvpn/radiusplugin.cnf
nano /etc/openvpn/radiusplugin.cnf
</code></pre>
Edit next sections in /etc/openvpn/radiusplugin.cnf. Rest - leave as is.
<pre><code>name=ip-of-your-radius
retry=10 # change if needed
wait=600 # change if needed
sharedsecret=paste-here-radius-secret
</code></pre>
Server config
<pre><code>nano /etc/openvpn/server.conf
</code></pre>
Add lines:
<pre><code># For auth plugins. Uncomment if needed
# username-as-common-name
 
# RADIUS Auth
plugin /usr/lib/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
</code></pre>
If you want to compile it (I didn't tested):
<pre><code>apt-get install libgcrypt11 libgcrypt11-dev gcc make build-essential
wget http://www.nongnu.org/radiusplugin/radiusplugin_v2.1a_beta1.tar.gz
tar xvfz radiusplugin_v2.1a_beta1.tar.gz
cd radiusplugin_v2.1a_beta1/
make
cp radiusplugin.so /etc/openvpn/
cp radiusplugin.cnf /etc/openvpn/
</code></pre>
List of OpenVPN plugins: <a href="https://community.openvpn.net/openvpn/wiki/PluginOverview" rel="nofollow noreferrer">https://community.openvpn.net/openvpn/wiki/PluginOverview</a>
PS: similar algorithm for LDAP integration (find plugin in repo, use example config, add it in main config).

I have set up OpenVPN server (not the access server, the open source community version) and Freeradius 3 on my ubuntu machine. OpenVPN client authentication has been tested for both username/password and certificate/key mechanisms for users generated using Easy-RSA. Freeradius user creation and testing have been done by daloradius and ntradping respectively.
What I want, is to use RADIUS authentication for my VPN clients. Basically when the client prompts for username password, I want to login via the credentials I have created in freeradius.
There is very little info about it on the official documentation page of OpenVPN <a href="https://openvpn.net/community-resources/using-alternative-authentication-methods/" rel="nofollow noreferrer">in this page</a>
While following the guide, I have found that the openvpn-auth-pam plugin has been renamed, relocated and now comes prebuilt (if it's not feel free to correct me, I assumed that because the openvpn-plugin-auth-pam.so file was already there) <a href="https://i.stack.imgur.com/kEPKp.png" rel="nofollow noreferrer">into a different directory</a>
According to the guide I have to add the following line to my server configuration file.
<pre><code>plugin /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so [name of the module to be used for authentication] 
</code></pre>
So here I need to call for a module that calls freeradius to perform the authentication. The guide uses the &quot;login&quot; PAM module which is located at
/etc/pam.d directory, unless I found the wrong thing. In the same directory there is also a file named radiusd and the contents of the file are
<blockquote>
/* /etc/pam.d/radiusd - PAM configuration for FreeRADIUS */
/* We fall back to the system default in /etc/pam.d/common-* */
@include common-auth
@include common-account
@include common-password
@include common-session
</blockquote>
I am not sure what to do next. Is freeradius's own PAM module even relevant to the operation that I am trying to perform? Or do I need to use some external tools and libraries to integrate freeradius with OpenVPN? Or I need to create the module file by myself? Thanks in advance

Authenticate OpenVPN users via Radius (Freeradius)

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我已经在我的ubuntu机器上设置了OpenVPN服务器(不是access服务器、开源社区版本)和Freeradius 3。OpenVPN客户端身份验证已经测试了用户名/密码和使用Easy生成的用户的证书/密钥机制。Freeradius用户创建和测试分别由daloradius和ntradping完成。我想要的是，对我的...

通过Radius (Freeradius)认证OpenVPN用户-腾讯云开发者社区-腾讯云

问通过Radius (Freeradius)认证OpenVPN用户
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过Radius (Freeradius)认证OpenVPN用户EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过Radius (Freeradius)认证OpenVPN用户
EN