hi guys! i need your help!!
i have a bridge openvpn whith ubuntu. (Ubuntu 10.04 LTS the Lucid Lynx -)
it work very well but now i want to validate against AD. i read that, one posibility is whit openvpn-auth-ldap .
but when i configure my server and reset it, i receive this error:
* Starting virtual private network daemon(s)...
* Autostarting VPN 'auth-ldap' [fail]
my config :
server
port 1194
proto tcp
dev tap0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
server-bridge 10.30.113.68 255.255.255.0 10.30.113.249 10.30.113.254
keepalive 10 120
comp-lzo
persist-key
persist-tun
log /var/log/openvpn.log
log-append /var/log/openvpn.log
status /var/log/openvpn-status.log
verb 3
#===================================================#
# Client Settings
#===================================================#
# If you need to push routes you can do so here for example:
#push "route 192.168.0.0 255.255.255.0 192.168.255.1"
push "ping 10"
push "ping-restart 60"
push "dhcp-option DOMAIN gst.local"
push "dhcp-option DNS 10.30.113.102"
push "dhcp-option DNS 10.30.113.101"
#push "dhcp-option WINS 192.168.255.1"
push "route-delay 5"
push "echo "
push "echo Welcome to the EXAMPLE Network!"
push "echo "
#########autenticacion windows#####
###################################
#auth-user-pass-verify adscript via-file
plugin /usr/lib/openvpn/plugin/lib/openvpn-auth-ldap.so "/etc/openvpn/auth/ldap.conf"
client-cert-not-required
ldap.conf
<LDAP>
# LDAP server URL
URL ldap://my server
# Bind DN (If your LDAP server doesn't support anonymous binds)
# BindDN uid=Manager,ou=People,dc=example,dc=com
# Bind Password
# Password SecretPassword
# Network timeout (in seconds)
Timeout 15
# Enable Start TLS
TLSEnable yes
# Follow LDAP Referrals (anonymously)
FollowReferrals yes
# TLS CA Certificate File
#TLSCACertFile /usr/local/etc/ssl/ca.pem
# TLS CA Certificate Directory
#TLSCACertDir /etc/ssl/certs
# Client Certificate and key
# If TLS client authentication is required
#TLSCertFile /usr/local/etc/ssl/client-cert.pem
#TLSKeyFile /usr/local/etc/ssl/client-key.pem
# Cipher Suite
# The defaults are usually fine here
# TLSCipherSuite ALL:!ADH:@STRENGTH
</LDAP>
<Authorization>
# Base DN
BaseDN "ou=Users,dc=gst,dc=local"
# User Search Filter
SearchFilter "(&(uid=%u)(accountStatus=active))"
# Require Group Membership
RequireGroup false
# Add non-group members to a PF table (disabled)
#PFTable ips_vpn_users
<Group>
BaseDN "ou=Users,dc=gst,dc=local"
SearchFilter "(|(cn=Users))"
MemberAttribute uniqueMember
# Add group members to a PF table (disabled)
#PFTable ips_vpn_eng
</Group>
</Authorization>
thank ...! i hope that you understand my English. I am not english speaker!
