I am attempting to configure OpenVPN to use openldap to authenticate our Active Directory users who are a member of our VPN group in AD. Here is my ldap config for OpenVPN. Specifically I need the filter string to allow enabled users who are a member of the _VPN group. The one you see below is from an example script I found that explains how to configure LDAP for openvpn.

SearchFilter    "(&(objectClass=mailUser)(accountStatus=active)(enabledService=vpn))"

Any help is appreciated!

<LDAP>

# LDAP server URL

URL             ldap://172.16.1.70

# Bind DN (If your LDAP server doesn't support anonymous binds)

BindDN                CN=ldapusername,OU=LDAP,DC=example,DC=local

# Bind Password cn=vmail password

Password              *******

# Network timeout (in seconds)

Timeout         15

</LDAP>

<Authorization>

# Base DN

BaseDN          "dc=example,dc=local"

# User Search Filter

SearchFilter    "(&(objectClass=mailUser)(accountStatus=active)(enabledService=vpn))"

# Require Group Membership

RequireGroup    false

</Authorization>

Josh Cole

Network and Systems Engineer

Fresno Pacific University

(559) 453-3414