Welcome, Guest. Please login or register.
Did you miss your activation email?
Thursday 05 December 2024, 09:16:47 pm

Login with username, password and session length

The Latest Endian Firewall is now available for download HERE
14261 Posts in 4377 Topics by 6517 Members
Latest Member: Sandro
Search:     Advanced search
+  EFW Support
|-+  Support
| |-+  VPN Support
| | |-+  OpenVPN LDAP Authentication
0 Members and 0 Guests are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: OpenVPN LDAP Authentication  (Read 16275 times)
n8hack
Jr. Member
*
Offline Offline

Posts: 4


« on: Thursday 25 October 2012, 05:01:34 am »

Hey everybody. I have a set-up which I would like to get LDAP authentication working for OpenVPN.
I read a bunch of documentation about how to go about this and here is my /var/efw/openvpn/settings file

Code:
AUTHENTICATION_STACK=ldap,local
DOMAIN=mydomain.local
DROP_DHCP=
GLOBAL_DNS=...
GLOBAL_NETWORKS=...0/24
LDAP_BIND_DN=cn=admin,dc=mydomain,dc=local
LDAP_BIND_PASSWORD=mypassword
LDAP_URI=ldap://...
LDAP_USER_BASEDN=ou=people,dc=mydomain,dc=local
LDAP_USER_SEARCHFILTER=(&(objectCategory=person)(objectClass=user)(SAMAccountName=%(u)s))
OPENVPN_ENABLED=on
PORT=1194
PROTOCOL=udp
PURPLE_DEVICE=tap0
PURPLE_IP_BEGIN=...
PURPLE_IP_END=...
PURPLE_NET=...0/24
PUSH_DOMAIN=
PUSH_GLOBAL_DNS=on
PUSH_GLOBAL_NETWORKS=on

unfortunately I can't connect with any LDAP user accounts as I just get invalid user error in the log. I can't see any attempt made by endian to query LDAP.
Anyone have any ideas? I tried openvpn-auth as well from something I read which suggested openvpn-auth -i to test but in 2.5.1 all one gets is -i is an invalid switch.
connecting with a local account works as usual.

Endian 2.5.1
LDAPv3 server
Logged
n8hack
Jr. Member
*
Offline Offline

Posts: 4


« Reply #1 on: Thursday 25 October 2012, 05:15:06 pm »

Never Mind. The search filter was for Windows Active Directory. OpenLDAP doesn't have SAMAccountName in the tree.  Simple fix for anyone else looking to use this is
change the following line from my config:
Code:
LDAP_USER_SEARCHFILTER=(&(objectCategory=person)(objectClass=user)(SAMAccountName=%(u)s))

to :

Code:
LDAP_USER_SEARCHFILTER=(&(uid=%(u)s))

Mine works great now.
Logged
Pages: [1] Go Up Print 
« previous next »
Jump to:  

Page created in 0.063 seconds with 19 queries.
Powered by SMF 1.1 RC2 | SMF © 2001-2005, Lewis Media Design by 7dana.com