Need help: SSL VPN authentication LDAP + certificate

Hello everyone,

I have trouble finding a full guide of how to achieve SSL VPN user authentication using LDAP username + password and certificates. All the official guides show authentication using only certificate or local user/pass + certificate. Anyone has LDAP + cert model up and running and could share their concept? Would it be enough to create peer user with ldap-mode password and add it to the usergroup along with LDAP users? Thank you!