{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/community-catalog/issues/21","repository_url":"https://api.github.com/repos/rancher/community-catalog","labels_url":"https://api.github.com/repos/rancher/community-catalog/issues/21/labels{/name}","comments_url":"https://api.github.com/repos/rancher/community-catalog/issues/21/comments","events_url":"https://api.github.com/repos/rancher/community-catalog/issues/21/events","html_url":"https://github.com/rancher/community-catalog/pull/21","id":139307993,"number":21,"title":"OpenVPN Server with multiple authentication backends","user":{"login":"AlexisDucastel","id":1911945,"avatar_url":"https://avatars.githubusercontent.com/u/1911945?v=3","gravatar_id":"","url":"https://api.github.com/users/AlexisDucastel","html_url":"https://github.com/AlexisDucastel","followers_url":"https://api.github.com/users/AlexisDucastel/followers","following_url":"https://api.github.com/users/AlexisDucastel/following{/other_user}","gists_url":"https://api.github.com/users/AlexisDucastel/gists{/gist_id}","starred_url":"https://api.github.com/users/AlexisDucastel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AlexisDucastel/subscriptions","organizations_url":"https://api.github.com/users/AlexisDucastel/orgs","repos_url":"https://api.github.com/users/AlexisDucastel/repos","events_url":"https://api.github.com/users/AlexisDucastel/events{/privacy}","received_events_url":"https://api.github.com/users/AlexisDucastel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-08T15:37:55Z","updated_at":"2016-03-09T15:27:03Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rancher/community-catalog/pulls/21","html_url":"https://github.com/rancher/community-catalog/pull/21","diff_url":"https://github.com/rancher/community-catalog/pull/21.diff","patch_url":"https://github.com/rancher/community-catalog/pull/21.patch"},"body":"Hi there,\r\n\r\nHere are three new catalog entries with OpenVPN Server using differents kind of authentication backends :\r\n- ldap\r\n- HTTP Basic\r\n- HTTP Digest\r\n\r\nOpenVPN server is based on docker image https://hub.docker.com/r/mdns/rancher-openvpn/ , I splitted it in three diferent entries to simplify stack deployement.\r\n\r\nAny comment would be welcome !"},"comment":{"url":"https://api.github.com/repos/rancher/community-catalog/issues/comments/194345249","html_url":"https://github.com/rancher/community-catalog/pull/21#issuecomment-194345249","issue_url":"https://api.github.com/repos/rancher/community-catalog/issues/21","id":194345249,"user":{"login":"AlexisDucastel","id":1911945,"avatar_url":"https://avatars.githubusercontent.com/u/1911945?v=3","gravatar_id":"","url":"https://api.github.com/users/AlexisDucastel","html_url":"https://github.com/AlexisDucastel","followers_url":"https://api.github.com/users/AlexisDucastel/followers","following_url":"https://api.github.com/users/AlexisDucastel/following{/other_user}","gists_url":"https://api.github.com/users/AlexisDucastel/gists{/gist_id}","starred_url":"https://api.github.com/users/AlexisDucastel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AlexisDucastel/subscriptions","organizations_url":"https://api.github.com/users/AlexisDucastel/orgs","repos_url":"https://api.github.com/users/AlexisDucastel/repos","events_url":"https://api.github.com/users/AlexisDucastel/events{/privacy}","received_events_url":"https://api.github.com/users/AlexisDucastel/received_events","type":"User","site_admin":false},"created_at":"2016-03-09T15:27:03Z","updated_at":"2016-03-09T15:27:03Z","body":"Hi,\r\n\r\nThe main difference between this implementation and nixelsolutions's one, is that nixelslutions is an OpenVPN based on certificates (server and client), that require to open a ssh server listenener to be able to generate client certificates and configuration.\r\n\r\nMy version is based on \"first run generated\" server certificates, but with credentials auhtentication with multiple authentication backends (ldap, http basic or http digest for now).\r\n\r\nThe ovpn config file is the same for each client (only one config file to spread to users), and use OpenVPN native interactive authentication mode to retrieve client credentials. These are challenged against the choosen authentication backend, for example ldap, and if credentials are good, the OpenVPN accept the connection and give access to rancher managed network.\r\n\r\nIt allows IT team to give VPN access with central credential management."}}