27 lines
623 B
Plaintext
27 lines
623 B
Plaintext
|
<LDAP>
|
||
|
|
# CHANGE THIS!!! to your AD server
|
||
|
|
URL ldap://192.168.1.22:389
|
||
|
|
# CHANGE THIS IF YOU USE A DIFFERENT SYSTEM BIND USER
|
||
|
|
BindDN oas_user@EXAMPLE.COM
|
||
|
|
# Bind Password
|
||
|
|
Password oas_user
|
||
|
|
|
||
|
|
# these settings should be ok
|
||
|
|
Timeout 15
|
||
|
|
TLSEnable no
|
||
|
|
FollowReferrals yes
|
||
|
|
</LDAP>
|
||
|
|
<Authorization>
|
||
|
|
# CHANGE THIS TO MATCH YOUR DOMAIN
|
||
|
|
BaseDN "CN=Users,DC=example,DC=com"
|
||
|
|
SearchFilter "(&(sAMAccountName=%u))"
|
||
|
|
RequireGroup true
|
||
|
|
<Group>
|
||
|
|
# CHANGE THIS TO MATCH YOUR USER DN
|
||
|
|
BaseDN "cn=Users,dc=example,dc=com"
|
||
|
|
# CHANGE THIS TO MATCH YOUR OPENVPN USER GROUP
|
||
|
|
SearchFilter "(cn=OpenVPNUsers)"
|
||
|
|
MemberAttribute "member"
|
||
|
|
</Group>
|
||
|
|
</Authorization>
|