OPENVPN GATE HOW TO
OPENVPN GATE INSTALL
OPENVPN GATE UPDATE

Build docker image using docker build -t gate.Or you can send a pull request to help us with this.

NOTE We will be putting more effort to automate VPN setup using Gate as well.

OPENVPN GATE INSTALL

If you want Gate to setup VPN for you then just install OpenVPN with easy rsa. Once Gate is setup, sign-in with your user and you should see welcome page with VPN profile download and VPN MFA Scanning. This command will setup your database and also run inital set of tests to make sure you have a successful setup. To finalize your setup you just need to run rake app:setup.

OPENVPN GATE UPDATE

Install and setup cache (redis) and update the following values ( CACHE_DB, CACHE_HOST).

Install and setup database (mysql) and update the following values ( GATE_DB_HOST, GATE_DB_PORT, GATE_DB_USER, GATE_DB_PASSWORD) on.

OPENVPN GATE HOW TO

Note that you still need to update GATE_HOSTED_DOMAINS to serve your e-mail domain.Ĭheck this guide For detailed information on how to setup OAuth. This option will provide you with sign-in form in Gate homepage that you can fill with e-mail and name to sign-in. If you setup Gate for development purpose and you want to avoid setting up OAuth, you can fill SIGN_IN_TYPE environment variable with form.

Run rake app:init to create environment file based on sample (we use dotenv to manage environment variables).

Ensure that ruby is installed (>= 2.4) and bundler gem is installed.

Manual Setup Initializing Your Application We are in the process of improving Gate setup process, please check back for updated instructions.

open_vpn_gate - for OpenVPN setup, it is not extracted yet.

cas_gate - CAS Customer MFA authentication handler for Gate.

nss_gate - Gate module for Linux Name Server Switch (NSS).

Not only it helps in controlling users access but it also helps in making most of it automated. Gate provides you with single sign-on solution plus centralised user management across your applications and services. If you don't use Google mail authentication, you can point gate to any OAuth provider and it should work. The entry point for self sign-in is Google mail authentication. And that can be controlled by reg-ex pattern on host name or IP addresses.

Access Control on Linux Gate also allows you to control access to specific machines, like which hosts a user can login.

Enable Name Service Switch (NSS) on Linux, so that Gate users can be discovered and authenticated on Linux.

Enable Linux authentication with pam_gate, which sits like a small module with Linux and allow authentication.

Provide you with JaSig CAS Custom Authentication Handler to authenticate with Gate SSO and in turn enabling MFA for JaSig CAS.Automatically create VPN profiles for each users.Setup OpenVPN with Gate authentication.Following scenarios can be handled by Gate: Gate provides single MFA Token authorisation across your organisation. Gate works by automating OpenVPN profile creation for you and also providing you with google multi-factor authentication (MFA) integration. Gate is a single sign-on (SSO) platform for centralised authentication across Linux, OpenVPN and CAS. For users, you might want to check CHANGELOG.md. Gate now uses semantic versioning to add more visibility on breaking changes.

Openvpn gate