Dotaz: openvpn a pam

[vpn...]

Instalujem OpenVPN server pod debianom cez tento script http://pastebin.com/HYignmw9 . Na strane servera som do configu doplnil plugin /usr/lib/openvpn/openvpn-auth-pam.so login.

Na strane klienta vyzera config nasledovne http://pastebin.com/sY4EKbVX VPN Funguje bezproblemov ked sa prihlasujem cez kluce, ale v tomto pripade (cez PAM) mi dava http://pastebin.com/1mBYr8ey Dakuejm za kazdu radu.

Odpovědi

[NN]

Tak jsem se docetl, ze puvodni varianta uz nefunguje a bude fungovat:

plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so system-auth

pripadne jeste na strane klienta:

auth-user-pass

NN

[vpn...]

Aha, ale Wed May 5 09:42:09 2010 PLUGIN_INIT: could not load plugin shared object /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so: /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so: cannot open shared object file: No such file or directory.

Ale aj ked pouzijem stary sposob a zapnem auth-user-pass tak ma autentifikuje ak pouzijem aj kluce. Ale ak kluce odstranim, necham len ca a pouzivam auth-user-pass tak mam vyssie popisany problem.

[vpn...]

Uz som to vyriesil:

plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth
client-cert-not-required

[vpn...]

Da sa spravit aby som z openvpn vychadzal von pod ipv6 ked ju mam na serveri?

[NN]

Currently, there's limited support for IPv6.

Point-to-point IPv6 tunnels are supported on OSes which have IPv6 TUN driver support (this includes Linux and the BSDs). IPv6 over TAP is always supported as is any other protocol which can run over Ethernet.

When OpenVPN 2.0 is run in server mode, IPv6 is currently only supported in TAP mode, not TUN mode (Server mode IPv6 TUN support will likely be added post-2.0).

The VPN carrier connection must currently use IPv4 endpoints, however there's a patch which can be found in the openvpn-devel archives which adds IPv6 support. This patch will probably be merged into the mainline post-2.0.

Ale nevim jaka je soucasna situac. mam k dispozici stabilni verzi 2.1~rc11-1 takze predpokladam, ze to pujde ale nezkousel jsem to...

NN