28 lines
749 B
Bash
Executable File
28 lines
749 B
Bash
Executable File
#!/bin/bash
|
|
|
|
#
|
|
# Generate OpenVPN users via google authenticator
|
|
#
|
|
|
|
if ! source "$OPENVPN/ovpn_env.sh"; then
|
|
echo "Could not source $OPENVPN/ovpn_env.sh."
|
|
exit 1
|
|
fi
|
|
|
|
if [ "x$OVPN_OTP_AUTH" != "x1" ]; then
|
|
echo "OTP authentication not enabled, please regenerate configuration using -2 flag"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z $1 ]; then
|
|
echo "Usage: ovpn_otp_user USERNAME"
|
|
exit 1
|
|
fi
|
|
|
|
# Ensure the otp folder is present
|
|
[ -d /etc/openvpn/otp ] || mkdir -p /etc/openvpn/otp
|
|
|
|
# Bin is present in image, save an $user.google_authenticator file in /etc/openvpn/otp
|
|
/usr/bin/google-authenticator --time-based --disallow-reuse --force --rate-limit=3 --rate-time=30 --window-size=3 \
|
|
"${1}@OpenVPN" -s /etc/openvpn/otp/${1}.google_authenticator
|