[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Running client as a service


  • Subject: Re: [Openvpn-users] Running client as a service
  • From: Craig Jackson <cjack@xxxxxxxxxxxx>
  • Date: Wed, 02 Mar 2005 21:50:32 -0600

Mathias Sundman wrote:

On Wed, 2 Mar 2005 cjackson@xxxxxxxxxxxxxxxx wrote:

I have Openvpn 2 working using tap bridge and road warrior connect. It is
one of the best most most well-thought out open source projects I know of.
My question concerns the openvpn-client2.0gui. All of the road warriors
need to log on to the windows domain and our Novell network, so I start
the client as a service and this works great. But we also need to password
the client pem key for security reasons. This does not work. The client
never prompts for the key password when the service is started but simply
stops and no connection is made. I tried checking service properties
"allow service to interact with desktop" -- does not help. Is there a way
to do this?


I've intended to develop a new version of OpenVPN GUI that makes use of a service wrapper and the management interface to get around this problem, but never found the time todo this.

Now I'm busy with another OpenVPN related project so it will probably take some time before I get around developing this.

But the good news is that I couldn't just let this problem stay unsolved any longer, so I've put together a temporary solution.

I've written a patch for OpenVPN that allows OpenVPN itself to get user input directly from a dialog window instead of the console. When running as a service, if you enable "allow service to interact with desktop", you will now get a dialog prompting for password (or even username and password, if that is what's requested).

To enable this feature, use the new --win32-gui option.

You can also use OpenVPN GUI in "Service only" mode to start/stop the connection as a non admin user. Unfortunally the GUI is doesn't know when a connection is completed when running as a service, so it will report "Connected" as soon as OpenVPN is started -- but it works at least!

Patch:
http://openvpn.se/files/patches/openvpn-2.0_rc16-gui.patch

Pre-compiled OpenVPN binary:
http://openvpn.se/files/openvpn/openvpn-2.0_rc16ms1.exe

Enjoy!

That was indeed a quick response. Thanks, Mathias.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Warning: require_once(../../../archive_common.php) [function.require-once]: failed to open stream: No such file or directory in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-03/msg00067.html on line 220

Fatal error: require_once() [function.require]: Failed opening required '../../../archive_common.php' (include_path='/usr/local/lib/php') in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-03/msg00067.html on line 220