Hi,
Is it possible to assigne username to cert or cert to username?
Currently I can connect to vpn server with 1 cert and all AD user+pass (member of specified group).
Thanks in advance!
CERT assign AD user (LDAP)
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
szett
- OpenVpn Newbie
- Posts: 3
- Joined: Thu Nov 05, 2020 9:55 pm
Re: CERT assign AD user (LDAP)
Hey, could u share your confit for ldap AD with OpenVPN, it is not working for me. Idk why.
-
tnandor85
- OpenVpn Newbie
- Posts: 2
- Joined: Tue Oct 27, 2020 11:21 pm
Re: CERT assign AD user (LDAP)
openvpn server config include this line, you should install openvpn-auth-ldap package
plugin /usr/lib/openvpn/openvpn-auth-ldap.so "/etc/openvpn/auth/auth-ldap.conf"
<LDAP>
# LDAP server URL
URL ldap://domain controller ip:389
BindDN "CN=ldapsyncusername,DC=example,DC=com"
Password "<password of ldapsyncuser>"
Timeout 15
TLSEnable no
FollowReferrals no
</LDAP>
<Authorization>
BaseDN "OU=Users or anything else,DC=example,DC=com"
SearchFilter "(sAMAccountName=%u)"
RequireGroup True
<Group>
BaseDN "OU=Users or anything else,DC=example,DC=com""
SearchFilter "(|(cn=Group of VPN users))"
MemberAttribute "member"
</Group>
</Authorization>
plugin /usr/lib/openvpn/openvpn-auth-ldap.so "/etc/openvpn/auth/auth-ldap.conf"
<LDAP>
# LDAP server URL
URL ldap://domain controller ip:389
BindDN "CN=ldapsyncusername,DC=example,DC=com"
Password "<password of ldapsyncuser>"
Timeout 15
TLSEnable no
FollowReferrals no
</LDAP>
<Authorization>
BaseDN "OU=Users or anything else,DC=example,DC=com"
SearchFilter "(sAMAccountName=%u)"
RequireGroup True
<Group>
BaseDN "OU=Users or anything else,DC=example,DC=com""
SearchFilter "(|(cn=Group of VPN users))"
MemberAttribute "member"
</Group>
</Authorization>