User (authentication), AD vs local

[necron]

Hi all,

First of all, thanks for the great product, it's a real time saver compared 'normal' FreeBSD with all the tools needed.

I followed this tutorial, http://forum.pfsense.org/index.php/topic,44689.0.html, succesfully to get AD authentication.
I have a couple of questions though.

• If you use certificate + user/pass based OpenVPN, how can you create a certificate without adding a local user first?
• When I delete a local user, his certificate gets deleted as well although his AD user still remains, how about this?
• When I try to log on the PFSense web interface as a local user or an AD user it both works, even if the passwords are different. Which one is leading?
• Can a website be assigned to a non-admin user so he/she can change their password?

Best regards,
Void.