On Fri, Jul 10, 2015 at 8:22 AM, Matthew Karas <[email protected]> wrote:

>
> I'm connected then I use
>
> forget-passwords
> SUCCESS: Passwords were forgotten
> signal SIGHUP
> SUCCESS: signal SIGHUP thrown
> >ECHO:1436480286,on
> >HOLD:Waiting for hold release
> hold release
>

That should work for re-connecting as the same or a different user.

I have a management-based UI that uses SIGUSR1 and SIGHUP to connect and
disconnect. It has always worked for a dozen of Windows users I have been
supporting...(with 2.2 and 2.3 server and clients). Change of username
after SIGUSR1 or SIGHUP works too.  An example session from a Linux client
using telnet is at the bottom of this email.

If still not working, please post the server and client configs.

Selva

On the client using telnet for illustration (typed commands are marked with
<-- input and output truncated):

$ telnet localhost 7500
>INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info

verb 3 <-- input
..
log on   <-- input

SUCCESS: real-time log notification set to ON

signal SIGUSR1   <-- input

>LOG:1436542580,D,MANAGEMENT: CMD 'signal SIGUSR1'
SUCCESS: signal SIGUSR1 thrown
>LOG:1436542580,I,SIGUSR1[hard,] received, process restarting
>LOG:1436542580,,Restart pause, 2 second(s)
...
>LOG:1436542582,,TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:1194,
sid=
>LOG:1436542582,,VERIFY OK: .....
...
>LOG:1436542585,I,Preserving previous TUN/TAP instance: tun1
>LOG:1436542585,I,Initialization Sequence Completed

Note that this is with passwords remembered and persist-tun, so the TUN/TAP
instance is reused and password is not prompted.

SIGHUP is more costly as the tun/tap is closed and re-opened, routes are
deleted and recreated etc.. but only marginally so.

Now, redo with with forget-passwords

forget-passwords   <-- input

>LOG:1436541949,D,MANAGEMENT: CMD 'forget-passwords'
SUCCESS: Passwords were forgotten

signal SIGUSR1     <-- input

>LOG:1436541952,D,MANAGEMENT: CMD 'signal SIGUSR1'
SUCCESS: signal SIGUSR1 thrown
>LOG:1436541952,I,SIGUSR1[hard,] received, process restarting
>LOG:1436541952,,Restart pause, 2 second(s)
>PASSWORD:Need 'Auth' username/password

username Auth xxxx
>LOG:1436542125,D,MANAGEMENT: CMD 'username Auth xxxx'
SUCCESS: 'Auth' username entered, but not yet verified
password Auth xxxxx
...
>LOG:1436540862,I,Initialization Sequence Completed

state  <-- input
1436542136,CONNECTED,SUCCESS,xxx,yyy
END

Selva
------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to