hi, this seems to come up every now and then, and now i also had the itch so i scratched.
i've created a small app that can be used by openvpn's auth-user-pass-verify to authenticate vpn users against the system user db. snarf it from http://www.wormhole.hu/~ice/tmp/openvpn_bsdauth.tar.gz the real question is, is it feasible to integrate it into the openvpn port? maintainer generally likes it, but is not sure about the policy of including third-part apps into the package and advised me to put it up for discussion. my view is that it's so bound to openvpn that a separate package would be insane; it's quite openbsd-specific so sending upstream wouldn't improve anything in the end; but it does fill a need, so it'd be good to get it somehow integrated. comments? (also comments on the code is welcome, but that should probably be kept off-list atm.) thanks, -- [-] mkdir /nonexistent