requisition
I am working with a client who wants to move from an untangle firewall using openvpn community edition to openvpn access server. he has about 800 client accounts to create on the new server. I have been looking at the CLI tools:
Generate an autologin profile for a user that doesn't require credential entry (autologin profiles use only a client certificate for security):
./sacli --user <USER> --key prop_autologin --value true UserPropPut
./sacli --user <USER> GetAutologin >client.ovpn
Generate a Windows MSI-based client installer that is bundled with an autologin profile:
./sacli --user <USER> --key prop_autologin --value true UserPropPut
./sacli --itype msi --autologin -u <USER> -o <OUTPUT_DIRECTORY> GetInstallerEx
The clients he is working with are currently set to autologin and uses keys for authentication. I want to as closely mimic the setup as possible to minimize the impact. How would i go about doing this?
The Johan
Yeah, just generate accounts with autologin property and use those client.ovpn files with autologin property to set things up. Autologin works with certificate embedded in the .ovpn file, and then only that .ovpn file is required to make a connection.