Home / ubuntu / Questions / 1269539
Accepted
Chemdream
Asked: 2020-08-24 12:14:53 +0800 CST

How to setup Strongswan to auth to LDAP?

  • 772

I'm trying to create an L2TP/IPSEC VPN server in 20.04 that uses LDAP for user authentication.

I'm assuming Strongswan does this.

Where, in Strongswan or other configs would I add the LDAP server info?

Or does it just use SSSD or PAM or something else and you just point Strongswan to that?

I'm specifically looking for LDAP, not Radius. I know radius is possible.

Any help would be appreciated. I realize there are a few questions close to this one. But all their answers require a GUI. This a cloud server, so no gui. Thanks!

vpn ldap ipsec l2tp

2 Answers

  1. strongSwan does not natively support LDAP authentication but it looks like you can somehow use FreeRADIUS as a go-between.

    • 0
  2. Best Answer

    The link that ExploitFate provided is correct.

    Also, in libreswan, you simply need this in ipsec.conf after you know PAM is working:

    xauthby=pam

    and comment out "xauthby=file"

    • 0