HELP: Locked out of admin web interface after enabling LDAP

atg

I should never try stuff like this on Friday after a long work week....

I had internal authentication set up on my Access Server. I followed the guide at:

http://openvpn.net/index.php/access-server/docs/admin-guides/190-how-to-authenticate-users-with-active-directory.html

to try and turn on LDAP with my 2008 R2 domain. I followed the guide and turned on the LDAP authentication.

It must be incorrect somehow because I am locked out of the web admin interface with both my normal internal openvpn accounts AND any Active Directory accounts.

Is there some way I can disable LDAP for the time being and enable the internal authentication again? I do have access to the terminal using the root account and can log in there.

Thanks!

rsenio

Try re-running the configure again

"After doing so you can navigate to the OpenVPN Access Server Admin UI. If you require a more advanced configuration you can go ahead and run the ovpn-init script:"

/usr/local/openvpn_as/bin/ovpn-init

http://openvpn.net/index.php/access-server/docs/91-how-to-access-server/general/124-how-to-activate-your-license-key.html

atg

Thanks for the reply

Will rerunning the configuration erase my current configuration and the added local users?

atg

atg wroteThanks for the reply

Will rerunning the configuration erase my current configuration and the added local users?

nevermind...when I ran the command it asked me if I wanted to delete the current configuration and start again.

I DONT want to do that.

Can I somehow just turn off the LDAP and turn on internal authentication again?

I found this command on here, but it doesnt seem to work:

./sacli --key auth.module.type --value local ConfigPut
./sacli start

http://openvpn.net/index.php/access-server/docs/admin-guides/375-local-users-module.html

atg

This is the second time I have posted for help here...and figured it out myself.

So here is what I did to fix the problem:

The main problem is that I wanted to get back into Local authentication because the LDAP did not work. So I did the following.

I navigated to where the sacli script is:

cd /usr/local/openvpn_as/scripts/

then ran these:

./sacli --key auth.module.type --value local ConfigPut
./sacli start

after that, Local authentication was enabled, and I could log back into the web interface.

Hope this helps someone.