Archives/opensense-docs
2
0
Fork 0
mirror of https://github.com/opnsense/docs synced 2024-11-10 19:10:55 +00:00
Code Issues Projects Releases Wiki Activity

Access / Servers - ldap two-factor

Browse Source
This commit is contained in:
Ad Schellevis 2022-08-04 21:55:54 +02:00
parent ad85241f50
commit f3a97487a7
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
source/manual/how-tos/user-ldap.rst
View File

@ -8,11 +8,15 @@ OpenLDAP and Novell eDirectory, to name a few.
OPNsense can use an LDAP server for authentication purposes and for authorization OPNsense can use an LDAP server for authentication purposes and for authorization
to access (parts) of the graphical user interface (web configurator). When using to access (parts) of the graphical user interface (web configurator). When using
LDAP for the GUI the privileges have to be defined with the local user manager, LDAP for the GUI the privileges have to be defined with the local user manager,
to do so an import of the users from the LDAP source is required. to do so an (automated) import of the users from the LDAP source is required.
In this how-to we will show you how to configure both using Microsoft Active Directory In this how-to we will show you how to configure both using Microsoft Active Directory
Server. If you only need LDAP for services like VPN, then you can skip steps 3-5. Server. If you only need LDAP for services like VPN, then you can skip steps 3-5.
.. Tip::
LDAP can also be combined with :doc:`Two-factor authentication </manual/two_factor>`
------------- -------------
Prerequisites Prerequisites
------------- -------------

2
source/manual/two_factor.rst
View File

@ -18,6 +18,8 @@ Supported services are:
* Virtual Private Networking - OpenVPN & IPsec * Virtual Private Networking - OpenVPN & IPsec
* Caching Proxy * Caching Proxy
New authentication servers can be added via :menuselection:`System -> Access -> Servers`, which supports
both local users and users synchronised via ldap.
---------------------------- ----------------------------
Time-based One-time Password Time-based One-time Password