|
|
340.
|
|
|
keepalive 1 3
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
keepalive 1 3
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:542(programlisting)
|
|
|
341.
|
|
|
It's a good idea to reduce the OpenVPN daemon's privileges after initialization.
|
|
|
|
|
Es una buena idea reducir los privilegios del demonio OpenVPN después de la inicialización.
|
|
Translated by
Eduardo Alberto Calvo
|
|
Reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
serverguide/C/vpn.xml:546(para)
|
|
|
342.
|
|
|
user nobody
group nogroup
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
user nobody
group nogroup
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:549(programlisting)
|
|
|
343.
|
|
|
OpenVPN 2.0 includes a feature that allows the OpenVPN server to securely obtain a username and password from a connecting client, and to use that information as a basis for authenticating the client. To use this authentication method, first add the auth-user-pass directive to the client configuration. It will direct the OpenVPN client to query the user for a username/password, passing it on to the server over the secure TLS channel.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:554(para)
|
|
|
344.
|
|
|
# client config!
auth-user-pass
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
# client config!
auth-user-pass
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:558(programlisting)
|
|
|
345.
|
|
|
This will tell the OpenVPN server to validate the username/password entered by clients using the login PAM module. Useful if you have centralized authentication with e.g. Kerberos.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:563(para)
|
|
|
346.
|
|
|
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so login
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so login
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
serverguide/C/vpn.xml:568(programlisting)
|
|
|
347.
|
|
|
Please read the OpenVPN <ulink url="http://openvpn.net/index.php/open-source/documentation/howto.html#security">hardening security guide</ulink> for further security advice.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:572(para)
|
|
|
348.
|
|
|
Advanced bridged VPN configuration on server
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:578(title)
|
|
|
349.
|
|
|
<application>OpenVPN</application> can be setup for either a routed or a bridged VPN mode. Sometimes this is also referred to as OSI layer-2 versus layer-3 VPN. In a bridged VPN all layer-2 frames - e.g. all ethernet frames - are sent to the VPN partners and in a routed VPN only layer-3 packets are sent to VPN partners. In bridged mode all traffic including traffic which was traditionally LAN-local like local network broadcasts, DHCP requests, ARP requests etc. are sent to VPN partners whereas in routed mode this would be filtered.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:580(para)
|
