Re: [Openvpn-users] Softphone Drops & Client re-authentication

[Jon Bendtsen <jon.bendtsen@xxxxxxxxxx>]

Den mandag 6.mar kl. 13:13 skrev Sameh Attia:

> Hi,
>
> Physical problems are bad, but i think you could easily run a caching
> openLDAP.
>
> Unfortunately, it is not possible at the moment. The LDAP server is  
> not hosted by us nor under our administration.

okay


> Did you try increasing the verbosity? with level 5
> you can see every time it sends and receives a packet.
>
> On Windows the View Log option does not show anything; I mean  
> nothing wierd. While on Linux showed:

it should show small wr and capital WR when it Writes and Receives
a packet.


>  Inactivity timeout (--ping-restart), restarting
>
> Which is not true. They were not idle nor inactive; there was a  
> call running over the tunnel.
>
> i did not mean the openvpn ip address, i ment the one outside the
> tunnel.
> Does that change? If that does change use --float
>
> No, it does not. That is what I told you. The IP address outside  
> the tunnel is not changed, they are not allowed to change it. A  
> domain policy inhibits it.

okay, i just saw that you used client-config-dir exclussively, and i  
figured
that the openvpn ip addresses are fixed as well.


> Only the server one made it through the mailing list.
>
>  I attached the client's configuration again.
>
> why do you use --duplicate-cn ?
> To duplicate cn.

But why? it is bad security. Do you only have one certificate for all
3489345934578 users?

I dont think the client config survived, it is one 1 byte big.
Try using pastebin.com to show me


JonB

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users