VPN - Revision history

Marcin: /* How to connect to the VPN */

2020-05-26T13:56:21Z

How to connect to the VPN

← Older revision		Revision as of 13:56, 26 May 2020
Line 25:		Line 25:
	# <code>Enter Auth Password:</code> - This is your 2FA 6-digit token that changes every 30 seconds. Get it from your [[2FA]] FLOSS TOTP app-of-choice.		# <code>Enter Auth Password:</code> - This is your 2FA 6-digit token that changes every 30 seconds. Get it from your [[2FA]] FLOSS TOTP app-of-choice.
	# <code>Enter Private Key Password:</code> - This is the passphrase you used to symmetrically encrypt your OpenVPN client RSA certificate when you were first setup with access to the OSE VPN. Check your personal password database.		# <code>Enter Private Key Password:</code> - This is the passphrase you used to symmetrically encrypt your OpenVPN client RSA certificate when you were first setup with access to the OSE VPN. Check your personal password database.

			From there, see more notes on access of server [[OSE_Staging_Server_Notes#Try_5\|here.]]

	===Developers: How to request access to the dev VPN===		===Developers: How to request access to the dev VPN===

Maltfield: /* Sysadmin: How to grant access to the dev VPN */

2020-05-10T19:04:07Z

Sysadmin: How to grant access to the dev VPN

← Older revision		Revision as of 19:04, 10 May 2020
Line 202:		Line 202:
	</pre>		</pre>

	Create the OpenVPN client config file		Create the OpenVPN client config file. Be sure to replace the name 'marcin' with the username of the OSE Dev to whom you're granting access.

	<pre>		<pre>

Maltfield: /* Links */

2020-05-09T09:55:50Z

Links

← Older revision		Revision as of 09:55, 9 May 2020
Line 312:		Line 312:
	==Links==		==Links==
	* https://www.grc.com/vpn/routing.htm		* https://www.grc.com/vpn/routing.htm
	* https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/r		* https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/

	[[Category: IT Infrastructure]]		[[Category: IT Infrastructure]]
	[[Category: Software]]		[[Category: Software]]

Maltfield at 09:55, 9 May 2020

2020-05-09T09:55:15Z

← Older revision		Revision as of 09:55, 9 May 2020
Line 312:		Line 312:
	==Links==		==Links==
	* https://www.grc.com/vpn/routing.htm		* https://www.grc.com/vpn/routing.htm
			* https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/r

	[[Category: IT Infrastructure]]		[[Category: IT Infrastructure]]
	[[Category: Software]]		[[Category: Software]]

Maltfield: /* Sysadmin: How to grant access to the dev VPN */

2019-12-29T11:03:04Z

Sysadmin: How to grant access to the dev VPN

← Older revision		Revision as of 11:03, 29 December 2019
Line 78:		Line 78:
	Last login: Mon Dec 2 15:21:42 CET 2019 on pts/17		Last login: Mon Dec 2 15:21:42 CET 2019 on pts/17
	[root@osedev1 ~]# adduser marcin		[root@osedev1 ~]# adduser marcin
			[root@osedev1 ~]# gpasswd -a marcin sshaccess
	[root@osedev1 ~]# mkdir /home/marcin/.ssh/		[root@osedev1 ~]# mkdir /home/marcin/.ssh/
	[root@osedev1 ~]# echo "ssh-rsa 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 marcin@Precision-M6500" >> /home/marcin/.ssh/authorized_keys		[root@osedev1 ~]# echo "ssh-rsa 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 marcin@Precision-M6500" >> /home/marcin/.ssh/authorized_keys

Maltfield at 05:41, 17 December 2019

2019-12-17T05:41:43Z

← Older revision		Revision as of 05:41, 17 December 2019
Line 306:		Line 306:
	* [[OpenVPN]]		* [[OpenVPN]]
	* [[OSE Development Server]]		* [[OSE Development Server]]
			* [[OSE Staging Server]]
	* [[OSE Server]]		* [[OSE Server]]

Maltfield: /* Sysadmin: How to grant access to the dev VPN */

2019-12-12T12:45:28Z

Sysadmin: How to grant access to the dev VPN

← Older revision		Revision as of 12:45, 12 December 2019
Line 233:		Line 233:
	# 2fa		# 2fa
	auth-user-pass username.txt		auth-user-pass username.txt
			auth-nocache
			reneg-sec 0
	EOF		EOF
	</pre>		</pre>

Maltfield: /* Sysadmin: How to grant access to the dev VPN */

2019-12-12T10:47:03Z

Sysadmin: How to grant access to the dev VPN

← Older revision		Revision as of 10:47, 12 December 2019
Line 284:		Line 284:

	Now the OSE Developer should be able to [[VPN#How_to_connect_to_the_VPN\|Connect to the VPN]].		Now the OSE Developer should be able to [[VPN#How_to_connect_to_the_VPN\|Connect to the VPN]].

			Make sure that the OSE Developer immediately makes a secure backup of:

			# Their openvpn dir
			# Their openvpn certificate decryption password
			# Their 2FA app's secret keys

	==Looking Forward==		==Looking Forward==

Marcin: /* Developers: How to request access to the dev VPN */

2019-12-06T21:10:46Z

Developers: How to request access to the dev VPN

← Older revision		Revision as of 21:10, 6 December 2019
Line 38:		Line 38:
	</pre>		</pre>

			or try apt-get install -f for dependency issues
	====Generate CSR====		====Generate CSR====

Maltfield: /* Sysadmin: How to grant access to the dev VPN */

2019-12-03T15:41:21Z

Sysadmin: How to grant access to the dev VPN

← Older revision		Revision as of 15:41, 3 December 2019
Line 85:		Line 85:
	</pre>		</pre>

	Now have the user scp their CSR to their home directory on the OSE Development server.		Now have the user scp their CSR (generated using the [[VPN#Developers:_How_to_request_access_to_the_dev_VPN\|instructions above]]) to their home directory on the OSE Development server.

	<pre>		<pre>