LDAP set up problems (continued)

Started by alsoeric, March 21, 2024, 11:04:51 PM

Previous topic - Next topic
Continuation of https://forum.opnsense.org/index.php?topic=37435.msg183770#msg183770 I'm starting a new message thread since it has been 3 months since I was able to look into LDAP and opnsense has moved to a whole new version. 

The TL;DR is System: Access: Tester tells me: Authentication failed and User DN not found. If you look at the message history, you'll see that kind people helped me figure out some of the problems, and the last problem was the extended query expression. I need the log where opsense logs what it looks for in LDAP.

The extended query I've worked out is: &(memberOf=memberOf=cn=vpn_users,ou=Users,o=no-see-me,dc=jumpcloud,dc=com)
The attached image shows what I  get using the extended query string in vscode's ldap browser. To my naive eye, looks correct.  However, the tester still says:
Quote
The following input errors were detected:

    Authentication failed.
    error: User DN not found

One of my assumptions is that I don't have to explicitly import users as they are just using openVPN. Of course, the openVPN LDAP connection opens up another set of issues, such as how to create the open VPN package for the user who's only active in LDAP.

Thanks in advance.

Quote from: alsoeric on March 21, 2024, 11:04:51 PM
The extended query I've worked out is: &(memberOf=memberOf=cn=vpn_users,ou=Users,o=no-see-me,dc=jumpcloud,dc=com)

BFH... I was staring at the config too long and missed the obvious error..

&(memberOf=memberOf=cn=vpn_users,ou=Users,o=no-see-me,dc=jumpcloud,dc=com)

at least I've documented the jumpcloud ldap connection for others.