[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] IP reservations ignored if dhcp-option is used


  • Subject: Re: [Openvpn-users] IP reservations ignored if dhcp-option is used
  • From: Gustavo Homem <gustavo@xxxxxxxxxxxxxxx>
  • Date: Mon, 29 Oct 2007 20:49:18 +0000

On Monday 29 October 2007 20:40, Erich Titl wrote:
> Gustavo Homem schrieb:
> > Hi,
> >
> > Replying to myself:
> >> As we can see from the logs, a connection with the Windows client
> >> doesn't trigger an OPTIONS IMPORT.
> >
> > I was tricked by the windows client. He typed the username with different
> > case combination so that name didn't match the ccd file. The problem is
> > that the authentication does not fail because the backend (Active
> > Directory) doesn't seem to be case sensitive.
> >
> > So indeed the IP reservations work as expected if the case is correct.
> >
> > Is there a way to prevent a client not listed on ccd/clientname from ever
> > getting an IP (even if the authentication works)? It would fix this
> > scenario.
>
> --ccd-exclusive
>     Require, as a condition of authentication, that a connecting client
> has a --client-config-dir file.

Thanks! This was the missing bit. I didn't notice it in the documentation.

It now works as expected.

Best regards
Gustavo


>
> cheers
>
> Erich
______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users