Error when disabling Multiple sessions per user

chort1

When I set "Multiple Sessions per user" to no and click Save settings, I get an error message

'__DEFAULT__': internet/defer:151,pages/advvpn:120 (KeyError)"

Any suggestions as to what the issue might be?

As an aside, is there a complete reference of command line configuration settings? I imagine some of the default settings are invisible unless changed. I was unable to find the setting for "Multiple sessions per user"

openvpn_inc

Hello chort1,

From your error message it seems that your user database might just be lacking the __DEFAULT__ user which is very strange because it is always supposed to be present. You could try going to your Access Server's console and logging in with root privileges, then going to /usr/local/openvpn_as/scripts/ directory, and running the command ./sacli userpropget, and see if __DEFAULT__ user is in there at all. If it's not, you might want to reach out to our support ticket system and ask how to restore the __DEFAULT__ user. That would at least resolve the error message and allow for things to likely proceed as they should.

The actual configuration parameter for the multiple session per user setting in the configuration database is "vpn.server.duplicate_cn". You can set it manually on the command line as root user with;
/usr/local/openvpn_as/scripts/sacli --key "vpn.server.duplicate_cn" --value "true" ConfigPut
/usr/local/openvpn_as/scripts/sacli start

You can use false to turn it off, true to turn it on. And if you remove it, it will go to its default which I believe is true;
/usr/local/openvpn_as/scripts/sacli --key "vpn.server.duplicate_cn" ConfigDel
/usr/local/openvpn_as/scripts/sacli start

For documentation see here;
https://openvpn.net/vpn-server-resources/#documentation-subtab-command-line

Kind regards,
Johan

chort1

Thanks, Johan,

The __DEFAULT__ user was indeed missing. Not sure how that happened, but this was on a lab installation, so it wasn't a big issue. I was able to recreate __DEFAULT__ by comparing with a prod server's config.

The primary goal was to apply the setting to make the config option show up with

sacli configquery

afterwards. That works now, and you've also provided me with the name for the setting, so thanks again!

openvpn_inc

Hi chort1,

You're welcome, have a great day.

Kind regards,
Johan