My question is about how to configure a simple authentication system to OpenVPN.
In the scenario there is an Active Directory Server. Zeroshell is the openvpn server for users. There are two possibilities to get this to work.
1.- Create users in Zeroshell with their own certificate and password. Cons: passwords for login AD and OVPN aren’t synced.
2.- Configure authentication against active directory. Cons: All domain users could login and this is not correct.
Is the radius server on Active Directory the unique solution to allow certain users to log in?