[Samba] Q: Samba AD, Pfsense, Windows 10, vpn

Kris Lou klou at themusiclink.net
Sun Mar 15 07:04:06 UTC 2020


On Sat, Mar 14, 2020 at 8:33 AM Michael Howard via samba <
samba at lists.samba.org> wrote:

> On 14/03/2020 14:43, gabben wrote:
> > Your pfSense firewall has OpenVPN built into it already, and you can
> > point pfSense authentication back to your samba AD. We support over
> > 400 users in this model. The configuration file for OpenVPN is common
> > to all users, and they authenticate with their AD credentials.
> Ahh, but can it bottom post :)
>
>
I can!!! ..... when I remember.

I like the Securepoint OpenVPN client compared to the "regular" OpenVPN
client.  It'll make life a bit easier for your users.  However, I do
generate individual certificates for my users in addition to AD
credentials, but YMMV.

But consider if you have software that's quite chatty ... like SMB or MS
SQL ... the latency might make the experience painful.  If these users are
already 1:1, it might be better to consider RDP instead.  Parallels RAS has
a new 90-day and 180-day license plan at a pretty affordable price to help
with this (I just talked to them yesterday).  Contact me off list if you
want more info.

-Kris


More information about the samba mailing list