OpenVPN AD LDAP+OTP Authentication Capability?

Question

linux

Is it possible to pass verification on OpenVPN server using username from AD and password using OTP plugin? As I understand it, we need a bunch of openvpn-auth-ldap and openvpn- otp
modules, but I don’t understand how to make sure that username is taken from AD, and password from OTP without using an AD password
+otp
Linux, pfsense, opnsense doesn't matter, as long as it works

Answer 1

OpenVPN works great with PAM, and LDAP can be implemented there. Moreover, there you can specify that the password is not used. The googleauthenticator is also inserted there.
You can read my paper. True, it uses one OTA key, and you will need more.