OpenVpn and Zimbra-LDAP Authentication

[temply85]

Hi all!
i've running Zimbra with Samba Integration.
today i've installed OpenVpn Access Server
i'm trying to configure it to auth users throught tha zimbra ldap, but with no success.
i require this settings:
Primary server: ldap://hostname:389

# Credentials for Initial Bind:
Use these credentials:

Bind DN: uid=zimbra,cn=admins,cn=zimbra
password: xxxxxxx

Base DN for User Entries: dc=birdys,dc=local

Username Attribute: uid

any idea on what i am wrong?
or where i've made mistake?

Thanx

Temply

[Rich Graves]

Your answer should be in /var/log/zimba.log, which is where slapd logs.

[elinstad]

I am running openvpn on a FreeBSD box in my network and authing against Zimbra LDAP. I have added the following plugin line to the openvpn.conf:

plugin /usr/local/lib/openvpn-auth-ldap.so auth-ldap.conf

and this is the contents of my auth-ldap.conf file (obviously changing your ldap URL and your base DN:

<LDAP>
        # LDAP server URL
        URL             ldap://<hostname or IP>
        # Bind DN (If your LDAP server doesn't support anonymous binds)
        BindDN          cn=config

        # Bind Password
        Password        <password>

        # Network timeout (in seconds)
        Timeout         15

        # Enable Start TLS
        TLSEnable       no

        # Follow LDAP Referrals (anonymously)
        FollowReferrals yes
</LDAP>

<Authorization>
        # Base DN
        BaseDN          "ou=people,dc=example,dc=com"

        # User Search Filter
        SearchFilter    "(uid=%u)"
</Authorization>

[juanschwartz]

Originally Posted by elinstad

I am running openvpn on a FreeBSD box in my network and authing against Zimbra LDAP. I have added the following plugin line to the openvpn.conf:

plugin /usr/local/lib/openvpn-auth-ldap.so auth-ldap.conf

and this is the contents of my auth-ldap.conf file (obviously changing your ldap URL and your base DN:

<LDAP>
        # LDAP server URL
        URL             ldap://<hostname or IP>
        # Bind DN (If your LDAP server doesn't support anonymous binds)
        BindDN          cn=config

        # Bind Password
        Password        <password>

        # Network timeout (in seconds)
        Timeout         15

        # Enable Start TLS
        TLSEnable       no

        # Follow LDAP Referrals (anonymously)
        FollowReferrals yes
</LDAP>

<Authorization>
        # Base DN
        BaseDN          "ou=people,dc=example,dc=com"

        # User Search Filter
        SearchFilter    "(uid=%u)"
</Authorization>

Has anyone been able to authorize on additional criteria? POSIX groups, zimbraAccountStatus even?