Commit Graph

7 Commits

Author SHA1 Message Date
Michael Tremer
c9dc7fdec0 openvpn-authenticator: Always return general connection data
The function returned different output when TOTP was configured and not
which is not what it should do.

This version will now try to add the TOTP configuration, or will add
nothing it if fails to do so.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-17 10:20:19 +00:00
Michael Tremer
b6f9fff2bc openvpn-authenticator: Don't process configuration when row is too short
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-17 10:20:19 +00:00
Timo Eissler
59f9e41361 openvpn-authenticator: Change event and environment handling
Move reading of environment in it's own function because not all
events have a ENV block following and thus always reading the ENV
will cause RuntimeError("Unexpected environment line ...").
2022-06-17 10:20:19 +00:00
Timo Eissler
472cd78269 openvpn-authenticator: Fix call of _client_auth_successful 2022-06-17 10:20:19 +00:00
Timo Eissler
a4a42daeea openvpn-authenticator: Return only available data
For connections which have not enabled OTP return
connection name and common_name attributes only.
2022-06-17 10:20:19 +00:00
Timo Eissler
74ab6f9fc0 openvpn-authenticator: Generate TOTP instead of HOTP codes 2022-06-17 10:20:19 +00:00
Michael Tremer
339b84d509 openvpn-2fa: Import a prototype of an authenticator
This script runs aside of OpenVPN and connects to the management socket.
On the socket, OpenVPN will post any new clients trying to authenticate
which will be handled by the authenticator.

If a client has 2FA enabled, it will be challanged for the current token
which will then be checked in a second pass.

Clients which do not have 2FA enabled will just be authenticated no
matter what and tls-verify will have handled the rest.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-17 10:20:18 +00:00