From 504c838b5af4ff1341eb27217ea9358eac986dd0 Mon Sep 17 00:00:00 2001 From: Robert Giles Date: Thu, 14 Dec 2017 11:51:20 -0600 Subject: [PATCH] Update ldap_bind_user to wrap in brackets, in the likely case the actually bind DN will reside in an OU with spaces in the name. --- README | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README b/README index 16c1763..0e83207 100644 --- a/README +++ b/README @@ -365,7 +365,7 @@ create file '/etc/pam.d/openvpn': auth required pam_yubico.so ldap_uri=ldap://contoso.com debug id=[Your API ID] yubi_attr=yubiKeyId ldapdn=DC=contoso,DC=com ldap_filter=(&(sAMAccountName=%u)(objectClass=user)(memberOf=CN=somegroup,DC=contoso,DC=com)) - ldap_bind_user=CN=binduser,CN=Users,DC=contoso,DC=com ldap_bind_password=bind_password try_first_pass + [ldap_bind_user=CN=binduser,OU=Service Accounts,DC=contoso,DC=com] ldap_bind_password=bind_password try_first_pass account required pam_yubico.so create file 'openvpn.conf'