[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] auth-user-pass problem


  • Subject: Re: [Openvpn-users] auth-user-pass problem
  • From: Mathias Sundman <mathias@xxxxxxxxxx>
  • Date: Wed, 19 Jan 2005 12:32:29 +0100 (CET)

On Wed, 19 Jan 2005, Gonda Laci wrote:

I have some problem with auth-user-pass verification.
Server: OpenVPN 2.0_rc8 (installed on yesterday, previously try 2.0_rc1)
on RedHat box
Client: OpenVPN GUI 1.0-beta26 on Win2000.

If I set SSL/TLS authentication, or use auth-user-pass auth. with
client-cert-not-required works fine.
I think set double auth. for more security (maybe somebody stole my
files...), but not work.
On the log (on server side) I see authentication failure, but client can
connect !
If I set PULL on the client side works fine, but i thing it's not too
good.

It's a security bug ?
Any idea ?

Yes, I just learned this one :-) --auth-user-pass REQUIRES --pull on the client side. The user/pass authentication uses the push/pull channel. You don't have to push any options though.


What OpenVPN version are you using on the client side? 2.0_rc8 (2.0_rc7 too, but with a bug!) reports this option error clearly.

--
_____________________________________________________________
Mathias Sundman                  (^)   ASCII Ribbon Campaign
OpenVPN GUI for Windows           X    NO HTML/RTF in e-mail
http://www.nilings.se/openvpn    / \   NO Word docs in e-mail


------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt _______________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users