To install
-
pip install -r requirements.txt
(might needsudo
) -
change your openvpn config to:
script-security 2 # 2 allows via-file, 3 allows via-env too
auth-user-pass-verify /path/to/foxpass-auth-user-pass.py via-file
username-as-common-name # without this openvpn will use cn in the certificate as username, instead of what was passed in
duplicate-cn # you may need this if everyone is using same certificate
- copy
foxpass.conf.sample
tofoxpass.conf
(make sure it's in the same directory as the script), and fill in theapi_key
and (optionally) the Duo information