openvpn_inc wrote
Hello Kiyomaka,
The bind account is so only an authenticated user can see objects in the LDAP directory. Anonymous access to that is usually turned off. So the bind account needs to have enough permissions to allow objects to be visible. In other terms the account needs to be able to enumerate the user accounts. You might want to use a tool like ldaptools on Linux to 'see' what the LDAP account can see.
Kind regards,
Johan
Would i be installing ldap tools on the Microsoft AD Domain Controller or the OpenVPN server itself?
By enumerate do you mean it should have enough access to view the properties and attributes of the user accounts signing into OpenVPN and any associated group dependencies?
