Need to add user to Admin group for OpenVPN to work

JamesBoes

I've just setup OpenVPN on pfSense 2.0.1 following the Road Warrior procedure on this webpage (http://blog.stefcho.eu/?p=492). When I test the OpenVPN connection and use the new user credentials that I created I can't get in (I get a "AUTH_FAILED" message). However, if I use the admin account I can get in. I subsequently added the new user account to the admin group and now that account works but it's obviously not how I want to set this up (add all VPN users to the pfsense admin group).

Any ideas?

cmb

There's no need to add VPN users to any groups, I do the setup as you described multiple times every week and never add users to any groups. Also never heard of anyone seeing that happen. What's the exact log you're getting in OpenVPN? My best guess is you were using a wrong username or password and got it right after adding to the admins group, where adding to the group is entirely unrelated.

johnpoz

Im on 2.1, but to go along with cmb.

As you can see I don't have any accounts other than the admin account in the admins group. And have no issues with accessing of openvpn.

I was even using the vpn connection to access the gui and take the screenshot.

admingroup.jpg_thumb

toomeek

I can confirm it's not needed.
I never assing admin group to anyone, expect IT staff..
You can just create separate certificate for every user.

pfsense-users.png_thumb