On pe, 29 marras 2019, Morgan Cox via FreeIPA-users wrote:
Thank you I can attempt to use Rhel8.1 and test that.
One other thing - I note the master branch of openvpn-auth-pam ->
https://github.com/OpenVPN/openvpn/tree/master/src/plugins/auth-pam
Now has
" plugin openvpn-auth-pam.so "login login USERNAME password PASSWORD pin
OTP"
(this isn't in latest stable 2.4.x)
In order to use it you have to add
'static-challenge' to OpenVPN client config
Will this work with sssd ?
Looking at the code, it should work. I haven't tried that myself,
though, so it is purely theoretical.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland