Query pfSense Local User Database using LDAP

[laurenta]

Hi,

Is it possible to query the pfSense local user database using LDAP ?

I want to make 2FA from a remote RADIUS server, but I need to check the password of the user, that's why I'm wondering about accessing the pfSense local user database using LDAP.

Regards,
Laurent.

[jimp]

No, the firewall is not an LDAP server.

[laurenta]

@jimp Thanks for this clear answer.

I'm trying to find a solution in order to do MFA on pfSense with an external RADIUS Server (OTP) and Internal user database (password).

Would it be possible to set up a "two stage" authentification scheme on the pfSense (for SSL VPN authentification for instance), so that first the external RADIUS server is checked (OTP Code) then the internal user database (password) ?

Thanks,

Laurent.

[Saqqara]

Which VPN client are you going to be using.

You can use 2FA / OTP password if you install radius on pfsense.

[jimp]

@laurenta said in Query pfSense Local User Database using LDAP:

Would it be possible to set up a "two stage" authentification scheme on the pfSense (for SSL VPN authentification for instance), so that first the external RADIUS server is checked (OTP Code) then the internal user database (password) ?

Not on pfSense itself natively, the RADIUS server itself would have to support that, and there are several that do (e.g. FreeRADIUS can be integrated with mOTP/Google Authenticator and potentially other types).

[laurenta]

@jimp My problem is that my customers are using pfSense internal user database and from my RADIUS server, there is no way to verify user’s password…