ops.point808.com/ovpn-ad-sync
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Josh North 2014-12-03 14:47:28 -05:00
parent e00cc20e93
commit 94c5231b2f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -9,6 +9,9 @@ Josh North 2014-12-01
josh.north@point808.com josh.north@point808.com
Free for use and modification. Credit is appreciated if you do anything with it but nothing is required. Free for use and modification. Credit is appreciated if you do anything with it but nothing is required.
###Status:
This script is (as of today, 2014-12-03) in *fully-working beta status*. It currently does not delete or revoke certificates but will in the near (but unknown) future.
###Theory: ###Theory:
Basically, the script should be run on a cron schedule. At run, it searches all users in a specified AD group. It then checks to see if subdirectories exist for the user, if not, it decides to create them. It then loops through to look for directories that do not have a corresponding user in the AD list and deletes them. It technically (at this point) does not revoke access and restart the vpn, this is IMPORTANT, because in my setup we are authenticating against AD anyway as a second layer. Basically, the script should be run on a cron schedule. At run, it searches all users in a specified AD group. It then checks to see if subdirectories exist for the user, if not, it decides to create them. It then loops through to look for directories that do not have a corresponding user in the AD list and deletes them. It technically (at this point) does not revoke access and restart the vpn, this is IMPORTANT, because in my setup we are authenticating against AD anyway as a second layer.
This is not fully secure but like I said, it is a major work in progress. This is not fully secure but like I said, it is a major work in progress.