Linux环境下基于LDAP验证的高校校园网OpenVPN应用方案设计  

The Design of Campus Network OpenVPN Application under Linux Environment Based on LDAP Authentication

作　　者：刘景林[1] 

机构地区：[1]泉州经贸职业技术学院信息技术系,福建泉州362000

出　　处：《上饶师范学院学报》2014年第3期114-120,共7页Journal of Shangrao Normal University

摘　　要：在Linux系统环境下,应用OpenVPN开源软件搭建高校校园网远程访问VPN,远程拨入VPN用户可以利用校园网防火墙映射的VPN服务器公网IP,与校内的OpenVPN服务器建立SSL安全连接。通过在OpenVPN服务器上编写Python脚本查询OpenLDAP服务器内的用户信息目录数据,实现远程拨入用户的身份验证。在安装OpenVPN服务器的Linux主机上配置访问授权及IPtables防火墙的源地址转换功能,实现方便校园网用户通过Internet安全地访问校内私有资源,同时也可满足教职工远程办公的需求。Under the linux system environment, By using the open source software of OpenVPN to build remotely access VPN in campus network, the VPN users by remotely dial - in can use VPN server public IP mapped by campus firewall connecting with OpenVPN server in school to build SSL secured connections, To check the directory data of users information in OpenLDAP server by writing Python scripts in OpenVPN server in order to authenticate the remotely dial - in user. Configuring access authorization and the IPtables firewaU＇s source network address translation on the iinux host installing OpenVPN ,so as to implement the things that Campus network users securely access to private resources on campus through the internet, and also to meet the needs of remote office staff.

关 键 词：Linux 远程访问 OPENVPN OPENLDAP 

分 类 号：TP393.03[自动化与计算机技术—计算机应用技术]