Page 1 of 1
Assigning Active Directory user as Superuser/Admin
Posted: Fri Mar 10, 2017 2:02 pm
by skpt
I am running openvpn AS 2.1.4 on ubuntu server 13.10 and have switched from Local authentication to LDAP. The LDAP works fine but now the two assigned admin users (that were in Local) don't have admin rights to login to the admin UI. How can I assign a user an LDAP/AD user as admin/super user?
I can access the admin UI using openvpn as the user.
Re: Assigning Active Directory user as Superuser/Admin
Posted: Fri Mar 17, 2017 9:00 am
by novaflash
The way this works is that with LDAP, the username that you enter when logging on (billy.bob) is sent to the LDAP server. Then the LDAP server looks this up with a case insensitive search (usually) and finds the account as Billy.Bob with capital letters. If the username and password check out, the username is reported back to the Access Server. The Access Server then does a case sensitive search in User Permissions for Billy.Bob, because that is the username that the LDAP server reports back and this is leading.
If the username isn't found with that exact spelling and capitalization, then any special settings won't be applied. Things like the admin flag will just not apply then. So kindly make sure the spelling and case under User Permissions matches 100% with the username as it is known in the LDAP server, and it should then work.
This is different from the behavior with LOCAL authentication. In LOCAL authentication, a case insensitive search is done.