*************openvpn *****************************************

[Anderson Bertling <andersonbertling@gmail.com>]

Bom dia ! 
alguém sabe com eu faço p fazer com que o openvpn faça a
autenticação pelos usuarios do samba, pelo pam eu sei que é com plugin
/usr/lib/openvpn-auth-pam.so common-auth. com os usuarios ruwindows 
nao podem acessar usando o pam, entao gostaria de colocar para rodar
com o samba isso é possivel ? como seria feto nesse caso ? 

essa é minha configuração do openvpn 
 ############################################################
# Dispositivo utilizado pelo OpenVPN
dev     tun

# Define que atuaremos como servidor
mode    server
# Indica que o servidor atuará como o
# controlador no canal de comunicação

# durante a conexão TLS
tls-server
# Permite que os clientes conectados ao
# servidor troquem pacotes entre si

 client-to-client
# with tls-auth  server is value 0 and client is value 1
#tls-auth keys/ta.key 0
dh      keys/dh1024.pem

ca      keys/ca.crt
cert    keys/server.crt
key     keys/server.key
duplicate-cn
server 171.171.100.0 255.255.255.0 # IP range clients

ifconfig-pool-persist ipp.txt
# note: initial tests used these, and they worked, but
# the man page hade the two lines above.

#ifconfig 192.168.100.1 192.168.100.2
#ifconfig-pool 192.168.100.5 192.168.100.200 # IP range clients
route-up "route delete -net 171.171.100.0/24"

route-up "route add -net 171.171.100.0/24 tun0"
ush "route 171.171.100.1" # add route to protected network

# the next line tells the client to route all traffic thru the VPN
# you might not want this
#push "redirect-gateway def1"

# if you do not want to route all client traffic thru VPN, do something
like
# the following (uncomment out and edit as needed)

#push "route 10.90.134.0 255.255.255.0"
#push "route 10.0.134.0 255.255.255.0"
#push "route 195.214.241.0 255.255.255.0"

# if you have mobile users, the following can be used:
#push "dhcp-option DOMAIN riseup.net"  #push the DNS domain suffix

#push "dhcp-option DNS 10.32.1.14 "  #push DNS entries to client
#push "dhcp-option WINS 69.90.134.134 "  #push WINS entries to client
port 1194

user nobody
group nogroup
; comp-lzo
ping 60
; ping-restart 45

; ping-timer-rem
persist-tun
persist-key
verb 6
log-append      /var/log/openvpn/openvpn.log

status          /var/log/openvpn/status.log
plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth

client-cert-not-required

desde ja fico grato 
-- 
Att 

Anderson Bertling 

-- 
Att 

Anderson Bertling