Extended Setup Process for the Google Authenticator Package

aioue commented 7 years ago

Have modified an existing OpenVPN install and followed the install process for openvpn-otp.

How do I generate values for the opt-secrets "key" (token?), and how do I link it to Google Authenticator on my phone?

Would like to use "sha1/base32 for Google Authenticator with a simple pin".

aioue commented 7 years ago

Solved:

install google-authenticator
run google-authenticator --time-based --disallow-reuse --force --rate-limit=3 --rate-time=30 --window-size=17 --issuer=foocorp --label=user@hostname --secret=/root/.user.google_authenticator > /root/user.auth
user.auth file will contain the key for entry into opt-secrets, and the Google URL containing the image to be scanned with the Google Authenticator mobile app.

Running the same command without redirecting it will produce an QR code on the command line. I cannot work out how to capture that though. Anyone?

Would you accept a README PR containing the above?

ptonewreckin commented 7 years ago

@aioue You should be able to capture the QR code with the Google Authenticator app. Open app, click '+', and scan barcode

evgeny-gridasov commented 7 years ago

@aioue Please send me a pull request and I'll accept it

aioue commented 7 years ago

evgeny-gridasov commented 7 years ago

Done. Sorry for the delay

evgeny-gridasov / openvpn-otp