Actions
Task #4231
closed
Task #4227: Activate a VPN service to grant complete access to the servers network from outside
Better authentication system for the openvpn server
Status:
Closed
Priority:
Normal
Assignee:
_InfraScience Systems Engineer
Category:
System Application
Target version:
Start date:
Jun 11, 2016
Due date:
% Done:
100%
Estimated time:
Infrastructure:
Development, Pre-Production, Production
Description
We are using the pam module with local users, right now.
A more secure and manageable system should use a 2FA authentication:
- local certificates (the personal INFN ones are OK
- username authentication via LDAP (a special group is needed to not open access to everyone)
Related issues
Updated by
Actions
