PfSense + OpenLDAP + OpenVPN + OTP (RADIUS?)
-
Hello All!
I'm trying to implement a solution to replace my current VPN server and would like your help. I don't have much knowledge about pfSense.
Today I have a virtualized Linux server with OpenVPN, where the authentication of external users is done by SSL certificates and OTP library (http://motp.sourceforge.net/). The database for these users is controlled by a TXT file, which stores the username, secret, PIN, etc. I also have another Linux server with OpenLDAP + Kerberos for authentication of internal network users.
I would like to know if it possible to configure pfSense to authenticate VPN users via LDAP using OTP.
I could set up a VPN service in pfSense using LDAP as backend. I also could use RADIUS + OTP as VPN backend. But I'm unsure of how to put it all together.
If possible, I must use a RADIUS schema for LDAP? RADIUS is the only way of using the OTP in pfSense?
Thanks and best regards