Openvpn and AD users

Feature
5

@Vinny74 just install openvpn-auth-ldap.x86_64 from Epel repo

modify files below :

  1. /etc/openvpnhost-to-net.conf

    plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-ldap.so “/etc/openvpn/auth/ldap.conf”

  2. /etc/openvpn/auth/ldap.conf

    URL ldap://example.local
    BindDN CN=openvpn,CN=Users,DC=example,DC=local
    Password openvpn
    Timeout 15
    TLSEnable no
    BaseDN "DC=example,DC=local"
    SearchFilter “(&(sAMAccountName=%u)(memberOf=CN=VPN users,CN=Users,DC=example,DC=local))”

In AD in Users create user openvpn with password openvpn. Create group of users “VPN users”

4 Likes