Forum Discussion

Alex_Wight_3530's avatar
Alex_Wight_3530
Icon for Nimbostratus rankNimbostratus
Oct 06, 2008

VPN API with ActiveID authentication

Hi All,

 

 

Please tell me if i'm completely wrong and going down the wrong route...

 

 

basically our organisation uses firepass and we all connect to the web interface, and log on with our username, activecard number (one time password from key fob) and domain password. This lets us log in and click full vpn to start firepass VPN. After looking at the tray example, i'm interested in trying to streamline the connection process using the API.

 

 

As i have read, the API only supports connecting with username and password (not PIN), so do i need to "generate" the password by prompting the user for the pin, using API's from the raduis server to get some sort of password from that, then connect to firepass with the username and that generated password?

 

 

Sorry if I am vague, or talking absoulute rubbish, I have just started to look at this and it's all quite new - and of course - is it possible at all.

 

 

Thanks in advance for any suggestions you may have.

 

 

Alex

 

 

  • Hey Alex,

     

     

    Umm...not 100% sure but i don't think this will work if you require both a password and additional domain password (two passwords). Have you just considered using the FirePass standalone client and CLI? On FirePass you can go to Device Management -> Client Downloads -> Windows (x86). Select everything, then hit update. Flick to the next tab, make sure all the settings are right and hit update, flick to the third tab and download and install it all.

     

     

    This will install an IPSec-like SSL VPN client. This may give you exactly what you need without the hassles of coding. If you make sure you DON'T use the Legacy Logon Mode it can support the dual auth your doing with no hassles at all.

     

     

    Cheers,

     

    Mal