發新話題
打印

set password authentication on openvpn

set password authentication on openvpn

I am using Ubuntu9.04.
pam_mysql.so 已經係最新的pam_mysql_0.7-0.6.rc1.fc10.i386

我係跟這條link set up
http://www.thismail.org/bbs/thread-2876-1-1.html

auth.log :
Jun  1 02:33:42  openvpn[32262]: PAM unable to dlopen(/lib/security/pam_mysql.so): /lib/security/pam_mysql.so: undefined symbol: pam_set_data
Jun  1 02:33:42  openvpn[32262]: PAM adding faulty module: /lib/security/pam_mysql.so

[email=root@abc:/home]root@abc:/home[/email]# ldd -r /lib/security/pam_mysql.so
undefined symbol: pam_set_data  (/lib/security/pam_mysql.so)
undefined symbol: pam_get_item  (/lib/security/pam_mysql.so)
undefined symbol: pam_strerror  (/lib/security/pam_mysql.so)
undefined symbol: pam_set_item  (/lib/security/pam_mysql.so)
undefined symbol: pam_get_user  (/lib/security/pam_mysql.so)
undefined symbol: pam_get_data  (/lib/security/pam_mysql.so)
        linux-gate.so.1 =>  (0xb8039000)
        libmysqlclient.so.15 => /usr/lib/libmysqlclient.so.15 (0xb7e3f000)
        libnsl.so.1 => /lib/tls/i686/cmov/libnsl.so.1 (0xb7e26000)
        libm.so.6 => /lib/tls/i686/cmov/libm.so.6 (0xb7dff000)
        libssl.so.7 => /lib/libssl.so.7 (0xb7db4000)
        libcrypto.so.7 => /lib/libcrypto.so.7 (0xb7c60000)
        libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb7c5c000)
        libz.so.1 => /lib/libz.so.1 (0xb7c46000)
        libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb7c14000)
        libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7ab0000)
        libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7a97000)
        /lib/ld-linux.so.2 (0xb803a000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xb7a6c000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb79da000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0xb79d6000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb79b1000)
        libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2 (0xb799b000)
        libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0xb7992000)
        libkeyutils.so.1 => /lib/libkeyutils.so.1 (0xb798e000)


巳加 /etc/pam.d/openvpn
內容如下:
auth sufficient pam_mysql.so user=vpn passwd=1234 host=localhost db=vpn table=vpnuser usercolumn=name passwdcolumn=password where=active=1 sqllog=0 crypt=0
account required pam_mysql.so user=vpn passwd=1234 host=localhost db=vpn table=vpnuser usercolumn=name passwdcolumn=password where=active=1 sqllog=0 crypt=0

用 testsaslauthd -u user -p password -s openvpn
error message : connect() : no such file or directory

係 /etc/openvpn/server.conf 已加
plugin /usr/lib/openvpn/openvpn-auth-pam.so openvpn
client-cert-not-required
username-as-common-name

client 一connect, 入username and password 然後fail.

TOP

發新話題