I need a push in the right direction when it comes to my specific setup. I spun-up OpenVPN[b] in Amazon[/b] using the AMI OpenVPN Access Server 2.1.1-fe8020db-5343-4c43-9e65-5ed4a825c931-ami-ede82a80.3 ([b]ami-fd67a590[/b]) Using these instructions, I setup LDAP [b]via the Admin UI[/b]: https://openvpn.net/index.php/access-server/docs/admin-guides/190-how-to-authenticate-users-with-active-directory.html I am currently using[b] SimpleAD in Amazon Web Services for Active Directory[/b]. This is sorta like Lightweight Active Directory. Is there anything I missed? What's not obvious to me is: 1.[i] Is there any configuration I need to setup on the server[/i] (e.g. at the command-line level) 2. [i]Do I need to create (or re-create) any Users or will OpenVPN automatically find or add those?[/i] Thank you so much in advance for your help. Tessando

LDAP Authentication for OpenVPN using EC2 and SimpleAD

tessando

I need a push in the right direction when it comes to my specific setup.

I spun-up OpenVPN in Amazon using the AMI OpenVPN Access Server 2.1.1-fe8020db-5343-4c43-9e65-5ed4a825c931-ami-ede82a80.3 (ami-fd67a590)

Using these instructions, I setup LDAP via the Admin UI: https://openvpn.net/index.php/access-server/docs/admin-guides/190-how-to-authenticate-users-with-active-directory.html

I am currently using SimpleAD in Amazon Web Services for Active Directory. This is sorta like Lightweight Active Directory.

Is there anything I missed?

What's not obvious to me is:

1. Is there any configuration I need to setup on the server (e.g. at the command-line level)
2. Do I need to create (or re-create) any Users or will OpenVPN automatically find or add those?

Thank you so much in advance for your help.

Tessando

tessando

I was able to get this working but I wanted to close this loop:

1. The initial bind works with the Administrator Account, set the DN to wherever the Administrator account is.
2. If your users are in a different OU, make sure to add that to the "Base DN for User Entries".

I did not need to create or re-create any users in OpenVPN.

Thanks again for this helpful forum!

Tessando