Very simple question. In the CWS interface on openvpn-as, under [code]User Management>User Permissions[/code] there is an optional switch labeled [quote]Require user permissions record for VPN access[/quote]. What exactly does this featuer/button do? Could someone please explain this? Thanks!

What is "Require user permissions record for VPN access."?

Danran

Very simple question. In the CWS interface on openvpn-as, under

User Management>User Permissions

there is an optional switch labeled

Require user permissions record for VPN access

.
What exactly does this featuer/button do? Could someone please explain this?

Thanks!

vnpenguin

I have the same question.

openvpn_inc

Hello Danran and vnpenguin,

If you're using an external authentication like LDAP or RADIUS or PAM, you might not want all accounts that are valid there to be able to log in via VPN. What you can do then is enable that option. Then only users that are added to the "User Permissions" table by the OpenVPN Access Server administrator are actually able to login. If you were to try to login with a user that is valid in the external authentication system, but it's not already listed in the Access Server, it would simply be denied access at the VPN server.

So, in other words, require a user permissions record for VPN access.

Kind regards,
Johan