edwin.boellaard
Hi all,
I'm trying to set up the following:
OpenVPN Access server with Active Directory Authentication. This is working without the Additional LDAP requirements, so basically every user within the AD can login and use VPN. However I want to restrict this by creating an Active Directory Security Group, add the allowed VPN users and block the unrestricted VPN connection usage.
However when I follow the examples provided, it is not working.
My AD is build like follows and where I have the security group listed:
OU=05. Security, OU=company name, DC=domain name, DC=local
I have named the group is VPN Access so I thought it would work like this:
memberOf=CN=VPN Access, DC=domain name, DC=local
but it doesn't work and I get authentication error:
LDAP exception on ldap://server IP/ (facility='search (u' DC=domain name, DC=local', 2, u'(&(sAMAccountName=username)(memberOf=CN=VPN Access, DC=domain name, DC=local))')'): user not found that meets specified requirements: memberOf=CN=VPN Access, DC=domain name, DC=local: auth/authldap:127,python2.7/threading:783,python2.7/threading:810,python2.7/threading:763,python/threadpool:210,python/context:59,python/context:37,auth/authldap:94,auth/authldap:127,util/error:61,util/error:44
Any clues how I can fix this and add restrictions by AD group on who I allow to VPN?
aaron.kovacich
Ok, just to clarify. The "VPN Access" group is in "OU=05. Security, OU=company name, DC=domain name, DC=local" , correct? If so, try this in the Additional LDAP Requirement field.
memberOf=CN=VPN Access, OU=05. Security, OU=company name, DC=domain name, DC=local
Hope this helps.
