OpenVPN using secure method for Active Directory Auth

tombodet

Anyone done this or is everyone using unsecure port 389?

Looking around I see bits about Google's openvpn-auth-ldap but it hasn't been updated since '08 and there are issues listed about problems with TLS. I've used the one perl script adamincanada posted here a while back but that doesn't appear to have TLS implemented either. Here: https://forums.openvpn.net/topic2403.html All I see is traffic on port 389. Looking at the script itself, there's no mention of LDAPS or TLS which I believe is why it isn't using port 636, you need a "start tls" in the script for a secure session.

I found a blog post that uses pure Kerberos and that works but it does not get me the other half which is group membership.

I can ldapsearch securely just fine. What I'm not understanding is how to get OpenVPN to do it. Anyone?

This is using Centos 6 64 bit.

Thanks.

Mimiko

The example specified in link is working, althought it is using unsecure connection between to servers. But, as OpenVPN is just using system's LDAP module, it is only to the new LDAP module to support secure connection to a LDAP server.