Two-factor authentication w/ PAM Plugin

[talong99]

Is it possible to use the PAM Plugin openvpn-auth-pam.so with pfSense?

I have copied the file from the FreeBSD package (I couldn't find the file on the pfSense filesystem) and added "plugin /var/etc/openvpn-auth-pam.so /etc/pam.d/login" to the custom options field in the GUI. Now I get this error:

Jan 24 12:21:54 pfsense openvpn[56602]: OpenVPN 2.0.6 i386-portbld-freebsd6.1 [SSL] [LZO] built on Apr  6 2006
Jan 24 12:21:54 pfsense openvpn[56602]: PLUGIN_INIT: could not load plugin shared object /var/etc/openvpn-auth-pam.so: Service unavailable: Too many links (errno=31)
Jan 24 12:21:54 pfsense openvpn[56602]: Exiting

Anyone have this working?

[talong99]

Hello,

I ended up getting this to work by doing a pkg_add of openvpn.

What kind of issues/problems, if any, have I introduced to my system?

[j0emv]

Anyone know anything about doing this with the embedded version?  I'm gonna give this a try because I would like another point of security before going production with my openvpn setup.