By creating individual SSL Certificates and per-User settings in
/etc7openvpn/ccd/<cn_of_the_certificate> we're able to assign static
IP addresses to our VPN clients. So far, so good.
We also use "auth-user-pass" and the user needs to specify his/her
email passwort to gain VPN access to our net. So far so good.
But can I prevent a user from using HIS SSL certificate but somebody
else's credentials?
E.g. he/she uses the cert with the cn hildeb.vpn.charite.de, but uses
the username "someotheruser" and the appropriate password?
I wonder if it's possible to tie the use of the username hildeb to the
certificate with the cn hildeb.vpn.charite.de, e.g. using a map that
specifies:
hildeb hildeb.vpn.charite.de
otheruser otheruser.vpn.charite.de