Grub
Hi There,
I am quite new to the community but I am using OpenVPN for about a Year now on a business purpose.
At the beginning all is great and everybody his happy but as my structure is growing I have the need to enhance the access control and restriction to the network using OpenVPN.
Here is the situation, as I don't know if that is available in one of the newest version (I am running 1.8.3 which is the AWS AMI). So I am controlling user access using LDAP and that works just fine. But what I would like to do is assigned network access based on an LDAP group membership.
Currently it is possible to do that but only if we are using local groups and users on the OpenVPN box. As you may guess, it is not practical to manage users on multiple platform and the LDAP authentication is a must have for all my system. (in addition I need to comply with some minimum security requirement which include central management of users.)
Would anyone have a idea on how I can achieve that ?
Many thanks for your answers.
Grub
alexlist
A friend of mine had a similar problem:
Two companies are sharing an office and the Internet connection/firewall and maybe some other local services, but have separate internal LANs.
Ideally, you want to set up two groups in LDAP for each company, and have OpenVPN AS determine group membership by querying LDAP.
It seems this is not possible?!
I would consider that a rather mandatory basic feature for any enterprise scenario.
