Kolab and remote LDAP authentication?

[mihai at badici.ro]

On Saturday 11 April 2015 11:13:03 Constantin Oesterling wrote:
> Hello Kolab Users,
> 
> we recently moved to Kolab as a mail system and it's great so far. Now I
> want to go one step further and use our Kolab as a centralized
> authentication server for VPN logins for example. I'm not familar with
> LDAP setups, so considering nothing listens on the typical LDAP ports
> with a default Kolab setup on CentOS 7, I wonder what the best approach
> would be to archive the goal I have in mind: be able to connect to the
> Kolab server via LDAP clients in order to authenticate with it (just
> using the Kolab users added through the GUI, so same as email).
> 
> If someone could point me in the right direction or even provide an
> example, it would be greatly appreciated.
In fact you need applications able to authenticate against LDAP.
There are a lot of products  having ldap protocol implemented: apache, squid, 
lot of web applications for example.
But speaking about VPN, it depends of the VPN method; I never tried but i 
think pptp and l2tp should support ldap; ipsec is not based on user/password 
method and openvpn also preffer certificate-based authentication. But in theory, 
on linux any method who need user/password can be directed to ldap via PAM 
module.