I am looking for some setup / configuration advise

jsharpftpl

I am attempting to roll out a test VPN using community edition -

I have setup the server on a windows server - I can connect with external clients using the referenced certs - though this will authenticate any user with the key and typo's still reaches the server side

so I am looking to deploy LDAP / AD checks but am unsure of the process on windows itself - my server is my DC here so I suspect I would pass the IP once routing can occur / or a secondary dns / gateway

- I tried using Openvpn-ldap-auth.so on a vm for testing - though this was a linux based server

I also am having some issues with getting the internal Lan to pass through / cannot ping anything

ie my client is connecting on 10.92.10.6 to the server on 10.92.10.1 through a router with DNAT set to forward traffic to my server / Domain Controller (TAP) is installed in Tunnel

but I wish to connect to the objects on the servers Lan / DEV side which is using 10.90.10.0/24

- I have a push route for 10.90.10.0 255.255.255.0 set but might be missing something in the syntax

So any help or assistance would be greatly appreciated

TinCanTech

For networking help I am available for hire.

300000

you can use Auth4OpenVPNv2.0.zip to setup authentication on windows , google is the best friend to help you do that job and that work beauty . i have done setup with it and good very well on windows server so it can do for your job.

the client cant go out because it is not config correct on server , you need NAT at server so client can go out side and connect to lan on server.

install routing and remote connection after that adding NAT object on interface on both networks , internet interface card chose internet, openvpn network card interface choose private that is done so client can go out with that proper configure correct NAT on server.

TinCanTech

@300000 .. once again, if you read the OP carefully you will understand that

this a a bridged notwork not a routed network.

300000

TinCanTech wrote @300000 .. once again, if you read the OP carefully you will understand that

this a a bridged notwork not a routed network.

he ask authentication only so nothing wrong with tap and tun , tun and tap do the same . I have done and it work on both tap and tun so doesn't matter tap or tun . authentication work on both.

TinCanTech

300000 wrote tun and tap do the same

Nope.

300000 wrote I have done and it work on both tap and tun so doesn't matter tap or tun . authentication work on both.

Sure .. but as above ..

jsharpftpl

Thank you for the replies I will look into the Auth4OpenVPN tool,

Obviously I suspected that there was a misconfiguration on the server with regards to the LAN access / Private network behind the server and the associated route - it does show as a push route in the logs and adds successfully , I don't believe it that difficult to resolve the issues at hand more it stems from my lack of familiarity with OpenVPN / the Authentication side I am happy to post logs or a sanitised config to see what the mistakes were of course

I appreciate the replies and assistance so far

jsharpftpl

So after looking at the mentioned script / I think authentication is validating running it via cmd prompt

though I noticed my tap adapter today is always listed as in use without me starting openvpn /I uninstalled the driver / tap but cannot test authenticating the connection as it keeps auto connecting

are there any easy solutions or will I have to rebuild the setup again to resolve this issue ??

Any help or assistance is appreciated

Thanks

300000

Automatic connect to what? Is that server turn auto on service ? Which software run so it use open network card? Openvpn not run how the card in use

jsharpftpl

I apologise for the ambiguity there , I believe the openvpn service was set to automatic and was taking ownership of the TAP , which in turn was stopping connectivity as the config for openvpn couldn't use that adapter after disabling the automatic start I was able to force a connection to occur on occasion

Though upon reattempting , the script listed it presented the same symptoms , while the service is on a manual start - oddly with the interactive service only running I could get a connection on the server side ahead of the tap

I was suspicious that persist-tun was potentially keeping the daemon running

Thank you for your reply