OpenVPN user password vs CLI password sync?
So maybe I am misunderstanding thing here. I want to create a user via the GUI and set a default password, then the user connects to the OpenVPN, ssh to the firewall, picks 8 and does passwd to change their password. This does not seem to work.
I can setup the user in the GUI. They can login into the OpenVPN. They can ssh to the system with the same uid/passwd as the OpenVPN user created in the GUI. They are able to get a CLI and use the passwd command to change their password. However it only seems to change the password for the CLI and not for OpenVPN.
If you disconnect and reconnect - the OpenVPN password is the old one. The CLI password is the new one.
What am I missing? Are these account not synced?
If they change their password using "passwd" or similar at the CLI, that does not change it in the pfSense configuration.
You can grant them a password change permission and then they can login to the GUI to change their own password.
Giving them shell access is fairly dangerous though. Keep in mind it's a firewall not a general purpose multi-user shell server.