diff --git a/README.md b/README.md index 112ed40..1aa28d1 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ Build requirements: Installation ------------ - cmake -DCMAKE_BUILD_TYPE=Release + cmake -DCMAKE_BUILD_TYPE=Release . make make test sudo make install @@ -42,11 +42,17 @@ Example config: # where to search for users basedn OU=users,DC=example,DC=com # allow only users who match this filter - userfilter (&(objectClass=inetOrgPerson)(user=%s)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com)) + userfilter (&(objectClass=inetOrgPerson)(user=%u)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com)) -Then, you need move this config to secure place and make sure that only root can read it. +...where %u is a placeholder for username. +You may test your config with special tool, named `oal-test`. +This tool takes lines with username and password, separated by space and will say is this pair valid or not. - install -m 0600 -o root -g root auth-ldap.conf /etc/openvpn/ +If everything works fine, you'll can continue. + +Next you need to move this config to secure place and make sure that only root can read it. + + mv auth-ldap.conf /etc/openvpn/ cd /etc/openvpn/ chmod 600 auth-ldap.conf chown root:root auth-ldap.conf @@ -54,7 +60,7 @@ Then, you need move this config to secure place and make sure that only root can Next, you need load your plugin in openvpn config. Add this line to actual config: - plugin /usr/lib/openvpn/oal.so "/etc/openvpn/auth-ldap.conf" + plugin /usr/lib/openvpn/openvpn-plugin-auth-ldap.so "/etc/openvpn/auth-ldap.conf" ... and restart oenvpn.