OpenVPN Access Server System Administrator Guide

4.3 Authentication Pages
4.3.1 General
Figure 32: General User Authentication page
Access Server does not store and manage user credentials. Instead, it interfaces with one of the
following systems for user authentication:
Local: This is a user authentication system that is managed by OpenVPN Access Server. You can
set the vpn users password on the User Permissions page when Local Authentication is enabled.
PAM: Pluggable Authentication Modules - The system used to authenticate users to the Unix host
running Access Server.
RADIUS: Between one and five RADIUS servers can be contacted for user authentication and
(optionally) also user accounting.
LDAP: An Active Directory domain controller or other LDAP server is used to validate user
credentials.
On the General User Authentication page, you can choose between the three methods of
authenticating Access Server users.
This setting can also be changed on the configuration pages for PAM, RADIUS and LDAP (e.g.,
on the RADIUS page, you can press Use RADIUS if RADIUS isn't already chosen). Note,
however, that only one authentication method type can be chosen for Access Server user
authentication.
OpenVPN Access Server System Administrator Guide
35