[deleted]
OPENVPN Access Server 2
what's the correct syntax in the web-based admin gui under
Additional LDAP Requirement: (Advanced)
if I want to lookup more than just one group?
When trying to connect with VPN Client it works as long as i have a query configured like:
memberOf=CN=VPNUsers, CN=Users, DC=example, DC=net
but multiple queries like:
(|(memberOf=CN="VPNUsers",CN=Users,DC=xxxxxx,DC=com)(memberOf=CN="VPNUsersIT",CN=Users,DC=xxxxxx,DC=com)(memberOf=CN="VPNUsersRD",CN=Users,DC=xxxxxx,DC=com))
don't work.
I'm using "post_auth_ldap_autologin_dbsave.py" script.
part of script is:
# determine the access server group based on LDAP group settings
if 'VPNUsers' in ldap_groups:
group = "VPNUsers"
elif 'VPNUsersIT' in ldap_groups:
group = "VPNUsersIT"
elif 'VPNUsersRD' in ldap_groups:
group = "VPNUsersRD"
elif 'VPNUserExt' in ldap_groups:
group = "VPNUsersExt"
Error I get:
LDAP exception on ldap://192.168.1.201/ (facility='search (u'CN=Users, DC=xxxxxx, DC=com', 2, u'(&(sAMAccountName=mark)((|(memberOf=CN="VPNUsers",CN=Users,DC=xxxxxx,DC=com)(memberOf=CN="VPNUsersIT",CN=Users,DC=xxxxxx,DC=com)(memberOf=CN="VPNUsersRD",CN=Users,DC=xxxxxx,DC=com))))')'): {'desc': 'Bad search filter'}: auth/authldap:122,ldap/ldapobject:545,ldap/ldapobject:541,ldap/ldapobject:99 (ldap.FILTER_ERROR)
Thanks
Mark
