Hi List

I’ve been struggling with this for a while and I would really appreciate some advice. 
I have an openvpn server using freeIPA to authenticate users logging into the office VPN. 
Currently all users have access to all services on the OpenVPN server. 
How do I use HBAC to properly restrict them to just OpenVPN? Do I need them to have access to anything else?
--
Sent from MetroMail