Two-factor authentication w/ PAM Plugin

talong99 · Jan 24, 2007, 5:31 PM

Is it possible to use the PAM Plugin openvpn-auth-pam.so with pfSense?

I have copied the file from the FreeBSD package (I couldn't find the file on the pfSense filesystem) and added "plugin /var/etc/openvpn-auth-pam.so /etc/pam.d/login" to the custom options field in the GUI. Now I get this error:

Jan 24 12:21:54 pfsense openvpn[56602]: OpenVPN 2.0.6 i386-portbld-freebsd6.1 [SSL] [LZO] built on Apr 6 2006
Jan 24 12:21:54 pfsense openvpn[56602]: PLUGIN_INIT: could not load plugin shared object /var/etc/openvpn-auth-pam.so: Service unavailable: Too many links (errno=31)
Jan 24 12:21:54 pfsense openvpn[56602]: Exiting

Anyone have this working?

talong99 · Feb 6, 2007, 4:25 AM

Hello,

I ended up getting this to work by doing a pkg_add of openvpn.

What kind of issues/problems, if any, have I introduced to my system?

j0emv · Feb 25, 2007, 4:54 PM

Anyone know anything about doing this with the embedded version? I'm gonna give this a try because I would like another point of security before going production with my openvpn setup.