New access interface and LDAP

[zerwes]

https://forum.opnsense.org/index.php?topic=45606.msg234376#msg234376

with this we can continue to use our old workflow, creating users from LDAP/AD for OpenVPN.

but in fact it just creates the users from LDAP as users in opnsense as Cedrik wrote, so there might be a problem like you create them, @itngo

[itngo]

So it seems like the ldap browser was not really necessary then, the true requirement is an automatic user sync based on the search query of the ldap servers?

Any idea when and if this will be implemented?

[Monviech (Cedrik)]

No info and there is no ticket on github describing the exact issue that needs to be solved.

Essentially a user does not have to exist in the user manager, the authentication also works if the user does not exist in there.

For OpenVPN the only requirement is a certificate with the username in the CN, and that can be created without needing a user.

Only if 2FA comes into play the user must exist literally in the users.

Theres also the new user portal in the business edition that automates even certificate creation if a user logs in there.