Support for multifactor authentication

[maloo1]

Hi,
I was was wondering if you support multifactor authentication - ie: a username/password and One time passcode (OTP) as mentioned here: https://github.com/evgeny-gridasov/openvpn-otp#using-openvpn-otp-for-multi-factor-authentication

Searching the Issues I see you do not support "static-challenge" but it sounded like there was another way to achieve this??

Thanks in advance!

[schwabe]

The app supports the more modern auth pending mechanism (see here https://github.com/OpenVPN/openvpn/blob/master/doc/management-notes.txt).

[maloo1]

Thanks Arne, Do you know if your planning on implementing it or is there another way to use an OTP with openVPN??

[schwabe]

The authpending method is already used for OTP/2FA with OpenVPN Access Server.

You need to use the management interface or those two patches https://patchwork.openvpn.net/patch/1899/ and https://patchwork.openvpn.net/patch/1816/

[schwabe]

But regarding static-challenge support. No, I don't plan on implementing it.

[maloo1]

Oh ok nice, I assume those patches need to be applied to the community version of openvpn? Do you know if/when they are planning on merging this (if not already merged)?

Can "client-crresponse" be implemented along with the plugin used by openvpn-auth-ldap to achieve MFA? Or is there a another way to achieve that?

FYI I'm just trying to implement MFA without using the access server. I have this working via the "community" version of the windows client but cannot connect from an android device...

[schwabe]

They should be merged before the release of OpenVPN 2.6. I personally do not have experience with openvpn-auth-ldap plugin but they should work together.