]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Parse static challenge response in auth-pam plugin
authorSelva Nair <selva.nair@gmail.com>
Wed, 25 Jul 2018 02:34:53 +0000 (22:34 -0400)
committerGert Doering <gert@greenie.muc.de>
Tue, 7 Aug 2018 19:00:12 +0000 (21:00 +0200)
commit7369d01bf360bcfa02f26c05b86dde5496d120f6
tree614f7c734dd1d03047205a0a9bc451720508826a
parent6690769f78bbfb889fef2a54088d979896c87d51
Parse static challenge response in auth-pam plugin

If static challenge is in use, the password passed to the plugin by openvpn
is of the form "SCRV1:base64-pass:base64-response". Parse this string to
separate it into password and response and use them to respond to queries
in the pam conversation function.

On the plugin parameters line the substitution keyword for the static
challenge response is "OTP". For example, for pam config named "test" that
prompts for "user", "password" and "pin", use

plugin openvpn-auth-pam.so "test user USERNAME password PASSWORD pin OTP"

Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1532486093-24793-1-git-send-email-selva.nair@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg17307.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/plugins/auth-pam/README.auth-pam
src/plugins/auth-pam/auth-pam.c