Assign IP address to LDAP group

[Ror]

Hey everyone,

I'm running an OpenVPN Server on a Debian 9 machine. I'm trying to find a way to assign an IP address to clients who authenticate with LDAP based on their LDAP group. The goal here would be to restrict access/routing to servers that are behind the OpenVPN server for clients that do not belong to the right LDAP group. Is there any way to achieve this ? My first guess was to look at ccd but I think it's user specific and I would like to avoid configuring each user.

Thanks !