Commit Graph

15 Commits

Author SHA1 Message Date
Ermal
fe2031ab18 Ticket #1052. Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this. 2011-07-15 13:10:40 +00:00
Scott Ullrich
673e809501 nuke trailing carriage returns 2010-12-22 10:39:12 -05:00
Ermal
befad72821 Ticket #1037. Move environment manipulation to the authentication script since escaping slashes is not so easz on dynamic built paths. 2010-11-26 21:54:44 +00:00
Scott Ullrich
9734b0545e Remove trailing carriage return 2010-11-10 12:00:32 -05:00
jim-p
8901958c07 Add backend code to verify username against cn on login if set by user. Needs GUI code to set the option yet. Ticket #887 2010-10-12 17:21:32 -04:00
Ermal Luçi
cc686d98fe Add the neccesary foo for radius.inc to work. 2010-03-02 20:19:35 +00:00
Ermal Luçi
8a6b0fbeb0 Add copyrights of myself. 2010-03-02 17:23:27 +00:00
Ermal Luçi
006a162f53 Take care of local authentication. Also when the user authenticates do not serach on other authentication sources. 2010-03-02 17:10:08 +00:00
Ermal Luçi
c61e462626 Allow the GUI auth API to be used for doing authentication against authentication servers specified. Teach Openvpn to use this API. Allow openvpn to authenticate against multiple servers that can be selected on the server configuration page. 2010-03-02 17:07:06 +00:00
Ermal Luçi
a13ce628f8 Do not allow login for expired and disabled users. Fix this even in openvpn authentication script. While here clean up the code quite a bit. 2010-03-02 10:21:12 +00:00
Chris Buechler
0c8d27635c Revert "fix OpenVPN user auth"
This reverts commit f67a48ccda.
2009-12-29 23:16:00 -05:00
Chris Buechler
f67a48ccda fix OpenVPN user auth 2009-12-29 23:10:24 -05:00
Scott Ullrich
523855b02b Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions 2009-09-12 15:34:07 -04:00
Matthew Grooms
1f5309a3a5 Use the correct syslog LOG_ERR constant and make this file executable. 2008-10-06 18:25:58 +00:00
Matthew Grooms
3c11bd3c5b Minor re-work of OpenVPN configuration. Use operational modes to determine
what configuration options are appropriate. The operational mode dictates
the authentication method. They are defines as follows ...

Peer to Peer ( SSL/TLS )
Peer to Peer ( Shared Key )
Remote Access ( SSL/TLS )
Remote Access ( User Auth )
Remote Access ( SSL/TLS + User Auth )

Some of these modes allow for user authentication using passwords. We now
use the etc/inc/openvpn.auth-user.php file to facilitate this by checking
the username and password supplied by OpenVPN against our centralized user
database.

The Server and Client user interfaces have also been updated to support
TLS packet authentication. This is an additional security option that is
optional.
2008-09-06 21:10:43 +00:00