OpenVPN GUI do not shutdown on AUTH_FAILED

gabell

Hi, folks
Sorry if it's not right place for this topic.
I use client-connect script in my configuration which checks user's profile. It works good and send AUTH_FAILED message to client if something's wrong. Problem is the openvpn gui do not exit on this message and password dialog appears again. Is there any chance to solve this.

Wed Jun 08 17:33:22 2011 SENT CONTROL [spb2.speechpro.com]: 'PUSH_REQUEST' (status=1)
Wed Jun 08 17:33:22 2011 AUTH: Received AUTH_FAILED control message
Wed Jun 08 17:33:22 2011 SIGTERM received, sending exit notification to peer
Wed Jun 08 17:33:23 2011 TCP/UDP: Closing socket
Wed Jun 08 17:33:23 2011 SIGTERM[soft,exit-with-notification] received, process exiting
Wed Jun 08 17:33:23 2011 OpenVPN 2.1.3 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Aug 20 2010

george

I believe this is the desired behavior, so a user can have a second chance at entering their username and password.

gabell

george wroteI believe this is the desired behavior, so a user can have a second chance at entering their username and password.

I use tls authentication instead of username-password auth. I meant password for private key when I say "password dialog". And I get error message box when password incorrect. Why openvpn gui don't give a second chance in this case?

janjust

the message

AUTH: Received AUTH_FAILED control message

is coming from the server when the wrong username/password is specified; it has nothing to do with TLS authentication; the GUI does allow you to enter the private key password multiple times if you start it using

oepnvpn-gui.exe --passphrase_attempts 4

this does not seem to work well with openvpn 2.2 , however.

gabell

janjust wrotethe message

AUTH: Received AUTH_FAILED control message

is coming from the server when the wrong username/password is specified;

or client-connect script returns non zero like in my case. Auth failed on server side, and no matter what user'll enter in password field, it's useless.
But users don't khow anything about server side. They think password's wrong and enter it again and again. Fortunately it's only 3 times 🙂