4

I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication.

I'm assuming Strongswan does this.

Where, in Strongswan or other configs would I add the LDAP server info?

Or does it just use SSSD or PAM or something else and you just point Strongswan to that?

I'm specifically looking for LDAP, not Radius. I know radius is possible.

Any help would be appreciated. I realize there are a few questions close to this one. But all their answers require a GUI. This a cloud server, so no gui. Thanks!

2 Answers 2

0

strongSwan does not natively support LDAP authentication but it looks like you can somehow use FreeRADIUS as a go-between.

1
0

The link that ExploitFate provided is correct.

Also, in libreswan, you simply need this in ipsec.conf after you know PAM is working:

xauthby=pam

and comment out "xauthby=file"

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .