LDAP and certificate authentication

gregarious_girl77

Greetings-

Is it possible to use LDAP to authenticate openvpn users, as well as using certificates (for backup purposes if the ldap server is down)?

Are there any setup guides that would help with this?

Thanks,
Jamie

janjust

openvpn can be configurd to use username+password authentication using an LDAP backend - there are tutorials for that on this forum. However, what exactly do you want your setup to do if LDAP fails: fail over to a second setup that does NOT require a username+password? should the LDAP setup be able to accept users WITHOUT a certificate?

It is NOT possible to do something like

connect using username+password, authenticate against the LDAP server
if that fails, use a certificate

that would require 2 openvpn server setups, and your client configs would have to fail over from one to the other.