Browse Source

* update readme

master
Alex 'AdUser' Z 7 years ago
parent
commit
b17f1f3d46
  1. 16
      README.md

16
README.md

@ -17,7 +17,7 @@ Build requirements:
Installation Installation
------------ ------------
cmake -DCMAKE_BUILD_TYPE=Release cmake -DCMAKE_BUILD_TYPE=Release .
make make
make test make test
sudo make install sudo make install
@ -42,11 +42,17 @@ Example config:
# where to search for users # where to search for users
basedn OU=users,DC=example,DC=com basedn OU=users,DC=example,DC=com
# allow only users who match this filter # allow only users who match this filter
userfilter (&(objectClass=inetOrgPerson)(user=%s)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com)) userfilter (&(objectClass=inetOrgPerson)(user=%u)(memberOf=CN=openvpn-users,CN=groups,DC=example,DC=com))
Then, you need move this config to secure place and make sure that only root can read it. ...where %u is a placeholder for username.
You may test your config with special tool, named `oal-test`.
This tool takes lines with username and password, separated by space and will say is this pair valid or not.
install -m 0600 -o root -g root auth-ldap.conf /etc/openvpn/ If everything works fine, you'll can continue.
Next you need to move this config to secure place and make sure that only root can read it.
mv auth-ldap.conf /etc/openvpn/
cd /etc/openvpn/ cd /etc/openvpn/
chmod 600 auth-ldap.conf chmod 600 auth-ldap.conf
chown root:root auth-ldap.conf chown root:root auth-ldap.conf
@ -54,7 +60,7 @@ Then, you need move this config to secure place and make sure that only root can
Next, you need load your plugin in openvpn config. Next, you need load your plugin in openvpn config.
Add this line to actual config: Add this line to actual config:
plugin /usr/lib/openvpn/oal.so "/etc/openvpn/auth-ldap.conf" plugin /usr/lib/openvpn/openvpn-plugin-auth-ldap.so "/etc/openvpn/auth-ldap.conf"
... and restart oenvpn. ... and restart oenvpn.

Loading…
Cancel
Save