allanger/container-openvpn
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Activity

Merge pull request #156 from fabn/patch-1

Browse Source 
Updated otp documentation with right repository name and debug info
This commit is contained in:
Kyle Manna
2016-09-03 10:48:04 -07:00
committed by GitHub
parent 8027454cb5 a3d5ac8e90
commit 0c743d91b6
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/otp.md
View File

@@ -13,15 +13,15 @@ In order to enable two factor authentication the following steps are required.
* Generate server configuration with `-2` option * Generate server configuration with `-2` option
docker run --volumes-from $OVPN_DATA --rm fabn/openvpn ovpn_genconfig -u udp://vpn.example.com -2 docker run --volumes-from $OVPN_DATA --rm kylemanna/openvpn ovpn_genconfig -u udp://vpn.example.com -2
* Generate your client certificate (possibly without a password since you're using OTP) * Generate your client certificate (possibly without a password since you're using OTP)
docker run --volumes-from $OVPN_DATA --rm -it fabn/openvpn easyrsa build-client-full <user> nopass docker run --volumes-from $OVPN_DATA --rm -it kylemanna/openvpn easyrsa build-client-full <user> nopass
* Generate authentication configuration for your client. -t is needed to show QR code, -i is optional for interactive usage * Generate authentication configuration for your client. -t is needed to show QR code, -i is optional for interactive usage
docker run --volumes-from $OVPN_DATA --rm -t fabn/openvpn ovpn_otp_user <user> docker run --volumes-from $OVPN_DATA --rm -t kylemanna/openvpn ovpn_otp_user <user>
The last step will generate OTP configuration for the provided user with the following options The last step will generate OTP configuration for the provided user with the following options
@@ -62,11 +62,13 @@ If something is not working you can verify your PAM setup with these commands
``` ```
# Start a shell in container # Start a shell in container
docker run --volumes-from $OVPN_DATA --rm -it fabn/openvpn bash docker run --volumes-from $OVPN_DATA --rm -it kylemanna/openvpn bash
# Then in container install pamtester utility # Then in container you have pamtester utility already installed
apt-get update && apt-get install -y pamtester which pamtester
# To check authentication use this command that will prompt for a valid code from Authenticator APP # To check authentication use this command that will prompt for a valid code from Authenticator APP
pamtester -v openvpn <user> authenticate pamtester -v openvpn <user> authenticate
``` ```
In the last command `<user>` should be replaced by the exact string you used in the ovpn_otp_user command.
If you configured everything correctly you should get authenticated by entering a OTP code from the app. If you configured everything correctly you should get authenticated by entering a OTP code from the app.