Duo Integration with LDAP Group mapping for Post Auth

anazary

Hello All,

I am trying to configure Duo integration with LDAP Group mapping into OpenVPN Access Server 2.11.4, but openvpn allows only one script for the Post Auth, I've tried to merge both of the python scripts into one, but for some reason it only executes the duo script "which is the second function in the script" but the ldap group mapping does not work, openvpn support does not cover custom scripts, and I've exhausted google searches without any luck, so I would appreciate any help to get this working,

Thanks,

mcdutch

Try running the LDAP mapping first, then call the Duo part. Also, check for any early returns in the script, those can stop it from running both parts. Debug prints helped me spot where it got stuck.

allan735

To integrate Duo with LDAP Group mapping in OpenVPN Access Server, create a single Python script with functions for Duo authentication and LDAP group lookup. In the main DMV AZ function, perform Duo authentication. If successful, retrieve group memberships from LDAP and determine access based on the results. Integrate the script with OpenVPN's post-authentication script field. Securely store credentials, implement robust error handling, and thoroughly test the script.