采用MYSQL存储OpenVPN验证信息
安装OPenVPN
一、安装MYSQL
[root@localhost ~]# tar zxvf mysql-5.1.57.tar.gz
www.2cto.com
[root@localhost ~]# cd mysql-5.1.57
[root@localhost mysql-5.1.57]# ./configure –prefix=/usr/local/mysql \
–with-extra-charsets=complex \
–enable-assembler \
–with-pthread \
–enable-thread-safe-client \
–with-big-tables \
–with-plugins=innobase,innodb_plugin \
–with-embedded-server \
–enable-local-infile \
www.2cto.com
–with-readline \
> && make && make install
## 建账号
[root@localhost mysql-5.1.57]# useradd mysql -M -s /sbin/nologin
## 更改目录权限
[root@localhost mysql-5.1.57]# chown -R mysql:mysql /usr/local/mysql
## 复制配置文件
[root@localhost mysql-5.1.57]# cp support-files/my-medium.cnf /etc/my.cnf
## 复制服务启动文件
[root@localhost mysql-5.1.57]# cp support-files/mysql.server /etc/init.d/mysqld
## 添加执行权限
[root@localhost mysql-5.1.57]# chmod +x /etc/init.d/mysqld
[root@localhost mysql-5.1.57]# /usr/local/mysql/bin/mysql_install_db –user=mysql
二、安装压缩组件
[root@localhost ~]# tar zxvf lzo-2.05.tar.gz
www.2cto.com
[root@localhost lzo-2.05]# ./configure && make && make install
三、安装OPENVPN
[root@localhost ~]# tar zxvf openvpn-2.0.9.tar.gz
[root@localhost openvpn-2.0.9]# ./configure && make && make install
## 复制服务启动文件
[root@localhost openvpn-2.0.9]# cp sample-scripts/openvpn.init /etc/init.d/openvpn
## 创建配置文件夹
[root@localhost openvpn-2.0.9]# mkdir /etc/openvpn/ -p
## 复制配置文件
[root@localhost openvpn-2.0.9]# cp ./sample-config-files/server.conf /etc/openvpn/
## 进入
[root@localhost openvpn-2.0.9]# cd ./easy-rsa/2.0/
## 配置vars
[root@localhost 2.0]# vim vars
## 更改成如下内容
# These are the default values for fields
# which will be placed in the certificate.
# Don’t leave any of these fields blank.
export KEY_COUNTRY="CN"
export KEY_PROVINCE="CN"
export KEY_CITY="BeiJing"
export KEY_ORG="Bejing"
www.2cto.com
export KEY_EMAIL=lishixin@pingco.com
## 执行
[root@localhost 2.0]# source ./vars
[root@localhost 2.0]# ./clean-all
## 创建配置文件
[root@localhost 2.0]# ./build-ca
[root@localhost 2.0]# ./build-key-server server
[root@localhost 2.0]# ./build-dh
[root@localhost 2.0]# openvpn –genkey –secret keys/ta.key
## 复制到配置文件夹目录
[root@localhost 2.0]# cp keys/* /etc/openvpn/
## 进入执行编译模块
[root@localhost openvpn-2.0.9]# cd ./plugin/auth-pam/
[root@localhost auth-pam]# make
[root@localhost auth-pam]# cp openvpn-auth-pam.so /etc/openvpn/
四、安装PAM_MYSQL组件
[root@localhost ~]# tar zxvf pam_mysql-0.7RC1.tar.gz
www.2cto.com
[root@localhostpam_mysql-0.7RC1]# ./configure \
–with-mysql=/usr/local/mysql && make && make install
## 创建一个软链
[root@localhost ~]# ln -s /lib/security/pam_mysql.so /lib64/security/
五、配置整合
[root@localhost ~]# service mysqld start
## 设置一个ROOT的访问数据库的密码111111
[root@localhost ~]# /usr/local/mysql/bin/mysql