Deploy authenticate VPN using LDAP AD (with user group)

[ctranminh]

Hi,

I'm stucking in configuration of LDAP Server with authenticate for VPN user using group in Windows Domain. I would like to create a group like "vpn-group" in Domain. If someone want to vpn, I just have to add that user in the group "vpn-group" then I can connect to the company.

Here is my configuration

aaa new-model
!
!
aaa authentication login userauthen local group ldap
aaa authorization network groupauthor local
!

ldap attribute-map map1
 map type sAMAccountName username
!
ldap server server1
 ipv4 192.168.0.5
 attribute map map1
 bind authenticate root-dn cn=administrator,cn=users,dc=test,dc=local password 7 0235114B0E144E621518
 base-dn cn=vpn-group,cn=users,dc=test,dc=local

Please advice me.

[Jan Kamper]

I got it working by including the AD security group in the search-filter

 search-filter user-object-type User)(memberOf=CN=vpn-group,OU=Security groups,OU=company,DC=test,DC=local