From 2cb12dc04243699209c94f774db6f5f9990536d3 Mon Sep 17 00:00:00 2001 From: Josh North Date: Wed, 3 Dec 2014 14:07:34 -0500 Subject: [PATCH] Updated readme --- README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/README.md b/README.md index a2d5f05..98711a7 100644 --- a/README.md +++ b/README.md @@ -3,6 +3,11 @@ ovpn-ad-sync Script to synchronize AD/LDAP users with OpenVPN config files and email user certificates and a setup guide to end users. This script is a very rudimentary hack to fill my purpose. It may or may not work for you. It could also be put to use with LDAP with minimal modification even though I wrote it for an Active Directory environment. +Author: +Josh North 2014-12-01 +josh.north@point808.com +Free for use and modification. Credit is appreciated if you do anything with it but nothing is required. + Theory: Basically, the script should be run on a cron schedule. At run, it searches all users in a specified AD group. It then checks to see if subdirectories exist for the user, if not, it decides to create them. It then loops through to look for directories that do not have a corresponding user in the AD list and deletes them. It technically (at this point) does not revoke access and restart the vpn, this is IMPORTANT, because in my setup we are authenticating against AD anyway as a second layer. This is not fully secure but like I said, it is a major work in progress.