Browse Source

* update readme

master
Alex 'AdUser' Z 7 years ago
parent
commit
b17f1f3d46
  1. 16
      README.md

16
README.md

@ -17,7 +17,7 @@ Build requirements:
Installation
------------
cmake -DCMAKE_BUILD_TYPE=Release
cmake -DCMAKE_BUILD_TYPE=Release .
make
make test
sudo make install
@ -42,11 +42,17 @@ Example config:
# where to search for users
basedn OU=users,DC=example,DC=com
# allow only users who match this filter
userfilter (&(objectClass=inetOrgPerson)(user=%s)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com))
userfilter (&(objectClass=inetOrgPerson)(user=%u)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com))
Then, you need move this config to secure place and make sure that only root can read it.
...where %u is a placeholder for username.
You may test your config with special tool, named `oal-test`.
This tool takes lines with username and password, separated by space and will say is this pair valid or not.
install -m 0600 -o root -g root auth-ldap.conf /etc/openvpn/
If everything works fine, you'll can continue.
Next you need to move this config to secure place and make sure that only root can read it.
mv auth-ldap.conf /etc/openvpn/
cd /etc/openvpn/
chmod 600 auth-ldap.conf
chown root:root auth-ldap.conf
@ -54,7 +60,7 @@ Then, you need move this config to secure place and make sure that only root can
Next, you need load your plugin in openvpn config.
Add this line to actual config:
plugin /usr/lib/openvpn/oal.so "/etc/openvpn/auth-ldap.conf"
plugin /usr/lib/openvpn/openvpn-plugin-auth-ldap.so "/etc/openvpn/auth-ldap.conf"
... and restart oenvpn.

Loading…
Cancel
Save