Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN with LDAP Windows 2012 R2 domain "AUTH_FAILED"

    OpenVPN
    2
    5
    1691
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • X
      xnyp
      last edited by

      Hi,

      I installed a pfsense with OpenVPN in bridge mode "tap". I get connected with a local account, but I can not connect with Active Directory.

      Tue 16 September 2014 11:29:13 AUTH: Received control message: AUTH_FAILED
      Tue September 16 11:29:13 2014 SIGUSR1 [soft, auth-failure] received, process restarting

      My domain is a domain level 2012 R2.
      ping the servers OK. I can browse and select my OUs (in system> users manager> server)

      I have a similar setup with a 2003 domain, it works.

      Do you have any tips please?

      Thank you in advance,
      regards

      1 Reply Last reply Reply Quote 0
      • B
        BeerCan
        last edited by

        can you post your sanitized ldap config?
        Are you using extended queries?

        one thing that made a difference in my domain is the extended query is in the format
        memberOf=CN=Groupname,CN=Users,DC=domainname,DC=com
        and not
        CN=Groupname,OU=MyGroups,DC=example,DC=com

        Also group member attribute is set to memberOf

        1 Reply Last reply Reply Quote 0
        • X
          xnyp
          last edited by

          Hi,

          Thank you for your reply.

          I do not use groups, it is not mandatory? OU contains only users …
          Attached screeshot ...


          1 Reply Last reply Reply Quote 0
          • X
            xnyp
            last edited by

            Hello,

            It's okay.

            The problem was my configuration (User naming attribute /  group naming attribute). It was incorrect.

            Attached screeshot (good configuration) to compare with the previous.

            Thank you so much!


            1 Reply Last reply Reply Quote 1
            • B
              BeerCan
              last edited by

              I think the group member attribute is what is causing most peoples issues with ad/ldap.

              Glad you got it working. :)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post