Re: [Openvpn-devel] [bui...@travis-ci.org: Still Failing: OpenVPN/openvpn#874 (master - 7473f32)]

2019-06-29 Thread Илья Шипицин
I submitted a fix https://patchwork.openvpn.net/project/openvpn2/list/?series=506 пн, 24 июн. 2019 г. в 11:17, Илья Шипицин : > Thank you for the investigation, Gert. > I'll have a look soon > > On Sun, Jun 23, 2019, 11:55 PM Gert Doering wrote: > >> Hi, >> >> travis CI builds for MacOS fail (a

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Gert Doering
Hi, On Sat, Jun 29, 2019 at 05:50:24PM +0300, Lev Stipakov wrote: > That --allow-nonadmin functionality was included into commit 3c7f2f553 from > yeah 2005. Here is code from tap-win32/tapdrv.c from the same commit: Sounds like these bits were lost in the port from tap5 to tap6 - which changed qu

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Gert Doering
Hi, On Sat, Jun 29, 2019 at 05:34:51PM +0300, Lev Stipakov wrote: > Indeed that registry key is confusing. If we fix it in tap6, won't we break > existing setups, which open tap6 > from unprivileged process and do not use --allow-nonadmin? Well, the default on installation would either have to be

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Selva Nair
Hi, On Sat, Jun 29, 2019 at 10:35 AM Lev Stipakov wrote: > > Hi, > >> So Lev's patch proposes to do service calls for wintun *and* tap6, and >> do so "always"? Or only if the registry key says so? > > > Yep, patch always opens wintun and tap6 via service no matter what > registry key says. Yes,

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Selva Nair
Hi, On Sat, Jun 29, 2019 at 10:50 AM Lev Stipakov wrote: > > That --allow-nonadmin functionality was included into commit 3c7f2f553 from > yeah 2005. Here is code from tap-win32/tapdrv.c from the same commit: > > +#if ENABLE_NONADMIN > + /* Read AllowNonAdmin setting from registry */ > +

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Lev Stipakov
That --allow-nonadmin functionality was included into commit 3c7f2f553 from yeah 2005. Here is code from tap-win32/tapdrv.c from the same commit: +#if ENABLE_NONADMIN + /* Read AllowNonAdmin setting from registry */ + { + NDIS_STRING key = NDIS_STRING_CONST("AllowNonAdmin"); +

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Lev Stipakov
Hi, So Lev's patch proposes to do service calls for wintun *and* tap6, and > do so "always"? Or only if the registry key says so? > Yep, patch always opens wintun and tap6 via service no matter what registry key says. > For some reason that registry key appears to be doing nothing in > > curren

Re: [Openvpn-devel] Using AllowNonAdmin in the advanced options of tap adapter

2019-06-29 Thread Gert Doering
Hi, On Fri, Jun 28, 2019 at 05:43:13PM -0400, Selva Nair wrote: > That's what lev's patch would do, but it wont respect the registry key > which is "supposed" to toggle non-admin access to tap-windows6 > adapters on and off. I'm still not following, sorry. Maybe I did not review the patch enough