How can I create a "User" using the command line?

ahmedibrahim

I teach courses where I can have 80-100 students. I want to give each one of them VPN access while maintaining a record of who logs in to the VPN. Thus, I need a unique username/password for each user. I'm interested in writing a script that can generate, say, 100 users.

P.S: I know someone will say why don't you want to use the Web GUI. The answer is: I will add 100 users then remove them then add another 100 users then remove them and so on. The GUI is not the right option for me.

jimp

Use RADIUS for that, not the pfSense user manager.

And not necessarily the pfSense FreeRADIUS package, but a separate RADIUS server. You could load your users in easily in most cases with RADIUS. OpenLDAP may also work for auth but tends to be more complicated to setup.

ahmedibrahim

@jimp Thanks for the advice. I don't know how to implement the solution you proposed. If you have a link to a good tutorial I'll be thankful.

NogBadTheBad

Are you using IPsec or OpenVPN?

ahmedibrahim

@nogbadthebad OpenVPN

NogBadTheBad

@ahmedibrahim

https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/authenticating-openvpn-users-with-freeradius.html

ahmedibrahim

@nogbadthebad It seems that I will still have to enter the username/password for every user through the GUI. Do you have a command that you used to create users through the cli after setting up the RADIUS as mentioned in the link you sent?

NogBadTheBad

I'd be tempted to create student001 to student100.

You may be able to get clever and create student001 via the GUI, do a backup and take a text editor to the XML file to create the other 99 accounts.

			<config>
				<sortable></sortable>
				<varusersusername>student1</varusersusername>
				<varuserspassword>student1</varuserspassword>
				<varuserspasswordencryption>Cleartext-Password</varuserspasswordencryption>
				<varusersmotpenable></varusersmotpenable>
				<varusersauthmethod>motp</varusersauthmethod>
				<varusersmotpinitsecret></varusersmotpinitsecret>
				<varusersmotppin></varusersmotppin>
				<varusersmotpoffset></varusersmotpoffset>
				<qrcodetext></qrcodetext>
				<varuserswisprredirectionurl></varuserswisprredirectionurl>
				<varuserssimultaneousconnect></varuserssimultaneousconnect>
				<description></description>
				<varusersframedipaddress></varusersframedipaddress>
				<varusersframedipnetmask></varusersframedipnetmask>
				<varusersframedroute></varusersframedroute>
				<varusersvlanid></varusersvlanid>
				<varusersexpiration></varusersexpiration>
				<varuserssessiontimeout></varuserssessiontimeout>
				<varuserslogintime></varuserslogintime>
				<varusersamountoftime></varusersamountoftime>
				<varuserspointoftime>Daily</varuserspointoftime>
				<varusersmaxtotaloctets></varusersmaxtotaloctets>
				<varusersmaxtotaloctetstimerange>daily</varusersmaxtotaloctetstimerange>
				<varusersmaxbandwidthdown></varusersmaxbandwidthdown>
				<varusersmaxbandwidthup></varusersmaxbandwidthup>
				<varusersacctinteriminterval></varusersacctinteriminterval>
				<varuserstopadditionaloptions></varuserstopadditionaloptions>
				<varuserscheckitemsadditionaloptions></varuserscheckitemsadditionaloptions>
				<varusersreplyitemsadditionaloptions>Class := &quot;admins&quot;</varusersreplyitemsadditionaloptions>
			</config>```