eurephiadm(7)
π eurephiadm β bestie's guide to the eurephia admin tool π
okay so real talk, this is page eurephiadm(7) and it's literally the group chat you need if you're running the eurephia plug-in for OpenVPN. no cap. let's get into it π«Ά
β¨ NAME β¨
eurephiadm β the eurephia administration utility. that's it, that's the name, and she's iconic for it π
πΈ SYNOPSIS πΈ
eurephiadm <command> [-h|--help] [-V|--version] [<global options>]
[-l|--log <filename>] [-L|--log-level <log level>] [<command arguments>]
π¦ DESCRIPTION π¦
eurephiadm is a generic command line tool for administering and configuring the eurephia plug-in for OpenVPN. it's giving "main character of your admin workflow", fr fr. lowkey she does a lot, so buckle up π
π COMMANDS π
here's every command available in eurephiadm. yes, all of them. we don't skip. β¨
help [<command>]β shows you this help screen when you don't give it any arguments. if you do hand it a command, it gives you the help screen for that specific command instead. it's literally so helpful, hence the name πlogoutβ logs you out of an activeeurephiadmsession. here's the tea: most of the operations ineurephiadmrequire you to authenticate yourself first. once you do, the session stays active for a predefined amount of time, so you're not re-authenticating every five seconds like some kind of clown. but if the session times out, or you use thelogoutcommand, you'll have to authenticate yourself all over again πusers [<arguments>]β the user management module. lists, adds, removes, activates, deactivates, and shows user account information for each eurephia user. she does it all π§lastlogβ queries the eurephia lastlog. this log holds the info about OpenVPN sessions that were authenticated via eurephia. receipts, basically πattempts [<arguments>]β shows or resets the registered failed login attempts registrations.blacklist [<arguments>]β shows, adds, or deletes blacklisted user accounts, certificates, or IP addresses. bye felicia πcerts [<arguments>]β SSL Certificate management for eurephia authentication. certs are the vibe, no cap πusercerts [<arguments>]β manages the relations between eurephia user accounts and certificates. this combo is called a user access, and it defines which access level the authenticated eurephia user will have to the network. honestly obsessed with how clean that is β¨fwprofiles [<arguments>]β firewall profile management. add, list, or delete (iptables) profiles available for eurephia in the operating system. heads up bestie: this feature is only available ifeurephiadmwas compiled with firewall support. if it wasn't... yeah. πadminaccess [<arguments>]β manages eurephia user accesses to administration utilities likeeurephiadm. very meta, very powerful πshow-configβ lists all config settings set in the database and in the~/.eurephia/eurephiadm.cfgfile. the full picture, periodt.show-configfileβ similar to theshow-configcommand, but lists only the parsed settings in the~/.eurephia/eurephiadm.cfgfile. just the file, nothing else πconfig [<arguments>]β add, delete, or show eurephia configuration settings stored in the database.
π FILES π
~/.eurephia/eurephiadm.cfgβ the default configuration file. it defines the database driver and the needed database parameters. this is home base, bestie π
π CONFIGURATION FILE π
so this file is a simple key-value based text file, where keys and values are separated by an equal sign ("="). and anything that comes after a hash ("#") gets ignored and treated as a comment. cute and simple π
these are the variables eurephiadm actually uses:
database_driverβ contains a full path to the database drivereurephiadmneeds to use.database_paramsβ all the database arguments the database driver requires must go here. check the man page for the corresponding database driver for more info on valid options. iykyk πlogβ defines how to log. if you give it a file name, logging gets sent to that log file. other valid values are:stderr:orstdout:β logging goes directly to stderr or stdout.syslog:[local0..local7 | daemon | authpriv]β logging gets sent to syslog. the default syslog destination isdaemon.
log_levelβ sets the log verbosity. normally the values go from 0 to 10, where0is as little logging as possible and10is very verbose. and ifeurephiadmor the database driver was compiled with debug logging, values up to 50 will be valid. 50!! that's so much logging πusernameβeurephiadmwill always ask for a user name when logging into the administration application. but by setting this variable, you set a default user name thateurephiadmwill use when logging in β so it only asks you for a password directly. the time-saver of the century, honestly π«Ά
π ENVIRONMENT π
EUREPHIA_DIRβ theeurephiadmutility looks for a configuration file by default in~/.eurephia/eurephiadm.cfg. this directory can be overridden by setting theEUREPHIA_DIRenvironment variable, andeurephiadmwill use theeurephiadm.cfgfile in this directory instead. relocating your config? slay β¨
β SEE ALSO β
eurephiadm-users(7)eurephiadm-lastlog(7)eurephiadm-attempts(7)eurephiadm-blacklist(7)eurephiadm-certs(7)eurephiadm-usercerts(7)eurephiadm-fwprofiles(7)eurephiadm-adminaccess(7)eurephiadm-config(7)edb-sqlite(7)
π AUTHOR π
Copyright (C) 2008-2012 David Sommerseth <dazo@users.sourceforge.net>
okay bestie that's the whole page π this version of eurephiadm(7) came out July 2010 from David Sommerseth, and yes she ate. go configure something iconic, you've got this ππ
πΈ
π¦ where this page comes from
- debian bookworm: eurephia 1.1.1-2
- debian trixie: eurephia 1.1.1-3
- ubuntu jammy: eurephia 1.1.0-6.1build1
- ubuntu noble: eurephia 1.1.1-2build2
- ubuntu questing: eurephia 1.1.1-3build1
- ubuntu resolute: eurephia 1.1.1-4
- ubuntu stonking: eurephia 1.1.1-4build1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms