arengifoc Hello guys: I've recently noticed a undesired behaviour on OpenVPN running on Windows. My current setup involves a OpenVPN server running on CentOS 7 which integrates authentication with AD (Samba 4). Eveybody works pretty fine from Windows desktop by providing their user+password on openvpn client connection. However, I've noticed that if a user disconnects their VPN session (through Disconnect option on OpenVPN-GUI) and tries to reconnect again, OpenVPN-GUI asks for their credentials again (which is fine, as expected), but a user gets successfully authenticated no matter which user and/or pass he uses. I mean, someone can type anything (user: random, pass: whatever) and OpenVPN allows connection without issues. I've tried adding "auth-nocache" at the end of .ovpn config files, but this didn't solve this problem. Anybody has experienced this before? Is there a solution for this? This is how my config file (.ovpn) look like: dev tun proto udp remote server1 1194 udp remote server2 1194 udp resolv-retry infinite nobind persist-key persist-tun pull tls-client ca ca.crt cert user.crt key user.key cipher BF-CBC comp-lzo verb 3 ping 15 ping-restart 60 auth-nocache auth-user-pass I hope someone can help me. Thanks in advance
TinCanTech Try removing these: arengifoc wrote persist-key persist-tun that can cause issues like this. Also, Please see: https://forums.openvpn.net/viewtopic.php?f=30&t=22603#p68963
