auth sufficient pam_ldap.so config=/etc/openvpn/pam_ldap.conf
auth required pam_deny.s

account required pam_ldap.so config=/etc/openvpn/pam_ldap.conf
account required pam_permit.so